last executing test programs: 8.119780667s ago: executing program 1 (id=2051): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x4) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000", 0x8}], 0x1}, 0x0) 7.730082458s ago: executing program 0 (id=2057): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, r1, 0xffffffffffffffff, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000800000000000000000000010500000020000000000000000000000b"], 0x0, 0x4e}, 0x28) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfd, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xc1, 0x4}, 0x84a0, 0x0, 0x0, 0x0, 0x7, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xc, &(0x7f0000000b40)=ANY=[@ANYRES8=r0, @ANYBLOB="105479735a59dff11d67c1ef5588c9c0ed15310de04ebe3d64fc2332c428ac14fcdf8d07778946854c96d3954f8344ac1393b1086ce2e8dfb1707dec9a0200000000000000920bf3796ea096f3c964c20d712c", @ANYRES16=r3], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x24004000) r8 = socket$kcm(0x2, 0x1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r8, r6}) sendmsg$kcm(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x1ff) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000090300000000000000000000030000000002000000020000000000000000d795c44800"], 0x0, 0x3e}, 0xffffffffffffffb4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x401, 0x4, 0x80000000, 0x20405, 0xffffffffffffffff, 0x9, '\x00', 0x0, r9, 0x2, 0x5, 0x4, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b80), &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9, &(0x7f0000000c00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x6d, 0x8, 0x0, 0x0}}, 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x15, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe53, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x9}, @generic={0xf, 0x8, 0x4, 0x2, 0x1}, @map_val={0x18, 0x5, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='GPL\x00', 0x5, 0x77, &(0x7f0000000ac0)=""/119, 0x41100, 0x60, '\x00', r11, 0x25, r12, 0x8, &(0x7f0000000e80)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000f00)=[r10, r10, 0xffffffffffffffff, r10, r10], &(0x7f0000000f40)=[{0x3, 0x4, 0x10, 0x1}, {0x3, 0x5, 0x10, 0x8}, {0x1, 0x9, 0x8, 0x1}, {0x2, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x3, 0x8}, {0x4, 0x4, 0x5, 0x5}], 0x10, 0x6}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f0000000300)='syzkaller\x00', 0xffff9d20, 0xaf, &(0x7f0000000440)=""/175, 0x41000, 0x8, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r4, r4, r13], &(0x7f0000000680)=[{0x4, 0x5, 0x10, 0x2}, {0x3, 0x2, 0xe, 0xa}, {0x2, 0x3, 0x0, 0xc}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.729441878s ago: executing program 1 (id=2058): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, r1, 0xffffffffffffffff, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000800000000000000000000010500000020000000000000000000000b"], 0x0, 0x4e}, 0x28) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfd, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xc1, 0x4}, 0x84a0, 0x0, 0x0, 0x0, 0x7, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xc, &(0x7f0000000b40)=ANY=[@ANYRES8=r0, @ANYBLOB="105479735a59dff11d67c1ef5588c9c0ed15310de04ebe3d64fc2332c428ac14fcdf8d07778946854c96d3954f8344ac1393b1086ce2e8dfb1707dec9a0200000000000000920bf3796ea096f3c964c20d712c", @ANYRES16=r3], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x24004000) r8 = socket$kcm(0x2, 0x1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r8, r6}) sendmsg$kcm(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x1ff) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000090300000000000000000000030000000002000000020000000000000000d795c44800"], 0x0, 0x3e}, 0xffffffffffffffb4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x401, 0x4, 0x80000000, 0x20405, 0xffffffffffffffff, 0x9, '\x00', 0x0, r9, 0x2, 0x5, 0x4, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b80), &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9, &(0x7f0000000c00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x6d, 0x8, 0x0, 0x0}}, 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x21, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe53, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r10}, @generic={0xf, 0x8, 0x4, 0x2, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @map_val={0x18, 0x5, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='GPL\x00', 0x5, 0x77, &(0x7f0000000ac0)=""/119, 0x41100, 0x60, '\x00', r11, 0x25, r12, 0x8, &(0x7f0000000e80)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000f00)=[r10, r10, 0xffffffffffffffff, r10, r10], &(0x7f0000000f40)=[{0x3, 0x4, 0x10, 0x1}, {0x3, 0x5, 0x10, 0x8}, {0x1, 0x9, 0x8, 0x1}, {0x2, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x3, 0x8}, {0x4, 0x4, 0x5, 0x5}], 0x10, 0x6}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f0000000300)='syzkaller\x00', 0xffff9d20, 0xaf, &(0x7f0000000440)=""/175, 0x41000, 0x8, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r4, r4, r13], &(0x7f0000000680)=[{0x4, 0x5, 0x10, 0x2}, {0x3, 0x2, 0xe, 0xa}, {0x2, 0x3, 0x0, 0xc}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.459132622s ago: executing program 1 (id=2060): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x4) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 6.971308615s ago: executing program 0 (id=2063): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000e300000000000000050002000000000085000000cc00000085000000000000000500feff00"], 0x0, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000002800000000000000000000085000000200000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.915307252s ago: executing program 2 (id=2064): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xb, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.864856929s ago: executing program 1 (id=2065): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000e300000000000000050002000000000085000000cc00000085000000000000000500feff00"], 0x0, 0x4}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce220000000020010010000000000000ffff7fc5f603ff65"], 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000002800000000000000000000085000000200000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.85192319s ago: executing program 2 (id=2067): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x7, 0x0, &(0x7f0000000100)="b34715ecd04550", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.652707916s ago: executing program 2 (id=2069): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8379"], 0x48) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="d7", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r4 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1, 0x6}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x22, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d71, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000580)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit], &(0x7f0000000180)='GPL\x00', 0x5, 0xf6, &(0x7f0000000700)=""/246, 0x41100, 0x33, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x2, 0xf, 0xd65}, 0x10, 0x1d0be, r1, 0x1, &(0x7f0000000680)=[r2, r2, r2, r2, 0xffffffffffffffff, r2, r2, r2], &(0x7f0000000800)=[{0x0, 0x1, 0x6, 0x2}], 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffdba, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x1000000, 0x800000, 0x0, 0x0, 0x646c, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x4fb5b6f85a83c771}, 0x1800, 0xc8, 0x0, 0x2}, 0xffffffffffffffff, 0x10000000000000, 0xffffffffffffffff, 0x0) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) 6.269570355s ago: executing program 0 (id=2070): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x4b, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0xfbfffffe, 0x10000, @value=r2}, 0x28) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000006c0)='./file0\x00'}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000e8ffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x0, 0xb, 0x9, 0x8, 0xfffffffffffffff0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffd12f}, @call={0x85, 0x0, 0x0, 0xbb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x65, &(0x7f0000000340)=""/101, 0x40f00, 0x66, '\x00', r5, 0x0, r3, 0x8, &(0x7f00000004c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xf, 0x800, 0xfffffffa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r6, 0xffffffffffffffff, r8], 0x0, 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r5, r10, 0x2, 0x1}, 0x50) r11 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, 0x0) 6.078704099s ago: executing program 3 (id=2071): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, r1, 0xffffffffffffffff, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000800000000000000000000010500000020000000000000000000000b"], 0x0, 0x4e}, 0x28) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfd, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xc1, 0x4}, 0x84a0, 0x0, 0x0, 0x0, 0x7, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xc, &(0x7f0000000b40)=ANY=[@ANYRES8=r0, @ANYBLOB="105479735a59dff11d67c1ef5588c9c0ed15310de04ebe3d64fc2332c428ac14fcdf8d07778946854c96d3954f8344ac1393b1086ce2e8dfb1707dec9a0200000000000000920bf3796ea096f3c964c20d712c", @ANYRES16=r3], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x24004000) r8 = socket$kcm(0x2, 0x1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r8, r6}) sendmsg$kcm(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x1ff) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000090300000000000000000000030000000002000000020000000000000000d795c44800"], 0x0, 0x3e}, 0xffffffffffffffb4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x401, 0x4, 0x80000000, 0x20405, 0xffffffffffffffff, 0x9, '\x00', 0x0, r9, 0x2, 0x5, 0x4, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b80), &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9, &(0x7f0000000c00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x6d, 0x8, 0x0, 0x0}}, 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x21, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe53, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r10}, @generic={0xf, 0x8, 0x4, 0x2, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @map_val={0x18, 0x5, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='GPL\x00', 0x5, 0x77, &(0x7f0000000ac0)=""/119, 0x41100, 0x60, '\x00', r11, 0x25, r12, 0x8, &(0x7f0000000e80)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000f00)=[r10, r10, 0xffffffffffffffff, r10, r10], &(0x7f0000000f40)=[{0x3, 0x4, 0x10, 0x1}, {0x3, 0x5, 0x10, 0x8}, {0x1, 0x9, 0x8, 0x1}, {0x2, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x3, 0x8}, {0x4, 0x4, 0x5, 0x5}], 0x10, 0x6}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f0000000300)='syzkaller\x00', 0xffff9d20, 0xaf, &(0x7f0000000440)=""/175, 0x41000, 0x8, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r4, r4, r13], &(0x7f0000000680)=[{0x4, 0x5, 0x10, 0x2}, {0x3, 0x2, 0xe, 0xa}, {0x2, 0x3, 0x0, 0xc}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.229038758s ago: executing program 0 (id=2072): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x20000884) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0xc, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x15) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40016002) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40000120) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x8002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) syz_clone(0x20040000, &(0x7f0000000200)="c39355ff", 0x4, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000580)="7661542a971a19ecb573628c2866bf4f3e1c98c5678cc99d39f49026cba5366498941a548e386e6750353823824a53f5edecc01a58d843fa77a373da4a29c861ca5fe225d05d4ec47b3a9b93bd16e6ac928fbe5398c437d26520b51efa40299a212d9b36aaff7aa4842e56be6dcdc1c3c1fd313a5b3785c3650e42799423c26570ce97af47c953847d1be8") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff965, 0x0, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="27031600160014000000002f1eafacf706e105000000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfc66}], 0x1}, 0x4) 4.978584831s ago: executing program 3 (id=2073): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0a"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff0000000003000000000080000000000005"], 0x0, 0x56}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x5, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00'], 0xfe33) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0xb, 0xfc00}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000180)={'a', ' *:* ', 'rm\x00'}, 0x9) 4.587352661s ago: executing program 3 (id=2074): r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff8500000004000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="2e1f000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x13240, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r4, 0x8010743f, 0xf0ff1f00000000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 1.571301098s ago: executing program 0 (id=2075): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xd, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.55148119s ago: executing program 2 (id=2076): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)={'b', ' *:* ', 'wm\x00'}, 0x9) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2022) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)=r0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000120091be"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async) write$cgroup_devices(r2, &(0x7f0000000140)={'b', ' *:* ', 'wm\x00'}, 0x9) (async) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2022) (async) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000000)=r0) (async) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000120091be"], 0xfe33) (async) 1.483413089s ago: executing program 1 (id=2077): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, r1, 0xffffffffffffffff, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000020000000800000000000000000000010500000020000000000000000000000b"], 0x0, 0x4e}, 0x28) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfd, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xc1, 0x4}, 0x84a0, 0x0, 0x0, 0x0, 0x7, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0xc, &(0x7f0000000b40)=ANY=[@ANYRES8=r0, @ANYBLOB="105479735a59dff11d67c1ef5588c9c0ed15310de04ebe3d64fc2332c428ac14fcdf8d07778946854c96d3954f8344ac1393b1086ce2e8dfb1707dec9a0200000000000000920bf3796ea096f3c964c20d712c", @ANYRES16=r3], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x24004000) r8 = socket$kcm(0x2, 0x1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r8, r6}) sendmsg$kcm(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x1ff) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000090300000000000000000000030000000002000000020000000000000000d795c44800"], 0x0, 0x3e}, 0xffffffffffffffb4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x401, 0x4, 0x80000000, 0x20405, 0xffffffffffffffff, 0x9, '\x00', 0x0, r9, 0x2, 0x5, 0x4, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000b40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000b80), &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9, &(0x7f0000000c00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x6d, 0x8, 0x0, 0x0}}, 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x20, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe53, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x9}, @generic={0xf, 0x8, 0x4, 0x2, 0x1}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @map_val={0x18, 0x5, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='GPL\x00', 0x5, 0x77, &(0x7f0000000ac0)=""/119, 0x41100, 0x60, '\x00', r11, 0x25, r12, 0x8, &(0x7f0000000e80)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000f00)=[r10, r10, 0xffffffffffffffff, r10, r10], &(0x7f0000000f40)=[{0x3, 0x4, 0x10, 0x1}, {0x3, 0x5, 0x10, 0x8}, {0x1, 0x9, 0x8, 0x1}, {0x2, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x3, 0x8}, {0x4, 0x4, 0x5, 0x5}], 0x10, 0x6}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x3}, [@exit]}, &(0x7f0000000300)='syzkaller\x00', 0xffff9d20, 0xaf, &(0x7f0000000440)=""/175, 0x41000, 0x8, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r4, r4, r13], &(0x7f0000000680)=[{0x4, 0x5, 0x10, 0x2}, {0x3, 0x2, 0xe, 0xa}, {0x2, 0x3, 0x0, 0xc}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.254765049s ago: executing program 2 (id=2078): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa000000, 0x30, 0x0, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea02f0e6dc", 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0f0000000400008b592f34001200000000170000351c9801da397eeaebf119927ec8cc2a6919cceaea40cc2e3e50f46521a1299b43270d990000000000000000000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f00000000c0), 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000000000030000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000801002000000000000000266d8b9ffff584cb971000000000000"], 0x50) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0xa40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f0000003000), 0x201, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000004c0)="a9", 0x1}], 0x1}, 0x4000810) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000005000000fd09000084000000050100", @ANYRES32, @ANYBLOB="00000000000000000000009547e467c70000000002"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00700142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.16892761s ago: executing program 1 (id=2079): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000200), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x27, &(0x7f0000000040), 0x4) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x30}, 0x7e8166965e22236a) r6 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000400000006000000000000000000ea00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.0843534s ago: executing program 3 (id=2080): r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r0, 0x6, 0x1d, &(0x7f00000000c0), 0xd8) (fail_nth: 2) 511.253844ms ago: executing program 3 (id=2081): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x10040, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_config_ext={0x0, 0xfff}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x1, r0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x104101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0x1}, r2, 0x1, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r1, 0x6, 0x1d, &(0x7f00000000c0), 0xd8) 344.473885ms ago: executing program 3 (id=2082): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4780, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0xb, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x4801000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0xe63af4ee11896fa, 0x0, &(0x7f0000000000)) gettid() r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8a06, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x3, 0x7, 0xffffffff, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x34, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0xb, 0xa, 0x1, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x5, 0x9, 0xb, 0x0, 0xfffffffffffffffc}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000081) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4780, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0xb, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_clone(0x4801000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0xe63af4ee11896fa, 0x0, &(0x7f0000000000)) (async) gettid() (async) socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8a06, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x3, 0x7, 0xffffffff, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x34, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0xb, 0xa, 0x1, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x5, 0x9, 0xb, 0x0, 0xfffffffffffffffc}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000081) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) (async) 203.515053ms ago: executing program 2 (id=2083): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) r6 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x4) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000", 0x8}], 0x1}, 0x0) 0s ago: executing program 0 (id=2084): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="b400000000000000000030000d00000085100000020400008700000088000000950000000000000095deffffff000000fb649926bd04872a998835b8a91ca5ae6b2d144a51fe7a892a1a946683404207f231bf06c1875d8e3de3a1686ec806a0003405a94058b03ea7e652b9c4a6f2a19887569a796be44ae871624313ab9d65060f6027256770a65bf2812276cae5e06875596d9a41bf6057e2a92dc171ecb6e8747a3f8717da35afe4408a3ec5635574ae4f00"/195], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x2af7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x20000000000000b9, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r3, 0x5460, 0x20000000) kernel console output (not intermixed with test programs): ? aa_sk_perm+0x83c/0x970 [ 275.070919][ T8439] ? aa_af_perm+0x330/0x330 [ 275.075450][ T8439] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 275.081894][ T8439] ? sock_rps_record_flow+0x19/0x3f0 [ 275.087215][ T8439] ? inet_sendmsg+0xe9/0x2f0 [ 275.091848][ T8439] ? inet_send_prepare+0x260/0x260 [ 275.096992][ T8439] ____sys_sendmsg+0x5ba/0x960 [ 275.101787][ T8439] ? __lock_acquire+0x7d40/0x7d40 [ 275.106841][ T8439] ? __asan_memset+0x22/0x40 [ 275.111460][ T8439] ? __sys_sendmsg_sock+0x30/0x30 [ 275.116510][ T8439] ? __import_iovec+0x5f2/0x850 [ 275.121399][ T8439] ? import_iovec+0x73/0xa0 [ 275.125937][ T8439] ___sys_sendmsg+0x2a6/0x360 [ 275.130647][ T8439] ? __sys_sendmsg+0x2a0/0x2a0 [ 275.135456][ T8439] ? __lock_acquire+0x7d40/0x7d40 [ 275.140531][ T8439] __se_sys_sendmsg+0x1c2/0x2b0 [ 275.145408][ T8439] ? __x64_sys_sendmsg+0x80/0x80 [ 275.150401][ T8439] ? lockdep_hardirqs_on+0x98/0x150 [ 275.155644][ T8439] do_syscall_64+0x55/0xa0 [ 275.160104][ T8439] ? clear_bhb_loop+0x40/0x90 [ 275.164812][ T8439] ? clear_bhb_loop+0x40/0x90 [ 275.169519][ T8439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.175444][ T8439] RIP: 0033:0x7f4bc379acb9 [ 275.179881][ T8439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.199611][ T8439] RSP: 002b:00007f4bc460e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.208058][ T8439] RAX: ffffffffffffffda RBX: 00007f4bc3a15fa0 RCX: 00007f4bc379acb9 [ 275.216051][ T8439] RDX: 00000000000000c9 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 275.224047][ T8439] RBP: 00007f4bc460e090 R08: 0000000000000000 R09: 0000000000000000 [ 275.232050][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.240053][ T8439] R13: 00007f4bc3a16038 R14: 00007f4bc3a15fa0 R15: 00007ffe4a462ab8 [ 275.248069][ T8439] [ 275.313919][ T8440] syzkaller0: entered promiscuous mode [ 275.326026][ T8440] syzkaller0: entered allmulticast mode [ 276.745775][ T8463] netlink: 'syz.1.867': attribute type 9 has an invalid length. [ 276.757405][ T8463] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.867'. [ 281.082462][ T8465] netlink: 'syz.1.867': attribute type 9 has an invalid length. [ 281.090421][ T8465] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.867'. [ 281.303500][ T8475] netlink: 'syz.0.870': attribute type 3 has an invalid length. [ 281.315328][ T8475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.870'. [ 281.360008][ T8476] netlink: 152 bytes leftover after parsing attributes in process `syz.2.869'. [ 281.594933][ T8482] netlink: 'syz.3.871': attribute type 21 has an invalid length. [ 282.243807][ T8496] syzkaller0: entered promiscuous mode [ 282.253345][ T8496] syzkaller0: entered allmulticast mode [ 282.451383][ T8510] netlink: 'syz.2.882': attribute type 3 has an invalid length. [ 282.472374][ T8510] netlink: 132 bytes leftover after parsing attributes in process `syz.2.882'. [ 284.647774][ T8522] netlink: 'syz.2.886': attribute type 10 has an invalid length. [ 284.655583][ T8522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.886'. [ 284.680744][ T8530] netlink: 152 bytes leftover after parsing attributes in process `syz.3.889'. [ 285.197158][ T5770] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 285.198749][ T5770] Bluetooth: hci3: hardware error 0x78 [ 285.405338][ T8537] netlink: 'syz.2.890': attribute type 21 has an invalid length. [ 285.711224][ T8553] žÿ: renamed from bond0 (while UP) [ 285.933240][ T8558] syzkaller0: entered promiscuous mode [ 285.941518][ T8558] syzkaller0: entered allmulticast mode [ 285.955737][ T8567] netlink: 152 bytes leftover after parsing attributes in process `syz.2.901'. [ 287.390239][ T5770] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 288.301645][ T8571] netlink: 132 bytes leftover after parsing attributes in process `syz.0.903'. [ 288.320951][ T8583] netlink: 'syz.2.907': attribute type 21 has an invalid length. [ 288.616287][ T8593] netlink: 'syz.0.908': attribute type 10 has an invalid length. [ 288.663256][ T8593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.908'. [ 289.146383][ T8606] netlink: 152 bytes leftover after parsing attributes in process `syz.1.914'. [ 289.433247][ T8617] netlink: 'syz.2.917': attribute type 21 has an invalid length. [ 289.586599][ T8619] syzkaller0: entered promiscuous mode [ 289.592596][ T8619] syzkaller0: entered allmulticast mode [ 291.780509][ T8627] netlink: 'syz.2.923': attribute type 10 has an invalid length. [ 291.791009][ T8627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.923'. [ 292.083807][ T8646] netlink: 152 bytes leftover after parsing attributes in process `syz.0.932'. [ 292.379065][ T8655] netlink: 'syz.1.931': attribute type 21 has an invalid length. [ 292.625685][ T8661] netlink: 'syz.3.937': attribute type 10 has an invalid length. [ 292.633662][ T8661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.937'. [ 293.032893][ T8668] syzkaller0: entered promiscuous mode [ 293.046565][ T8668] syzkaller0: entered allmulticast mode [ 295.088499][ T8682] netlink: 152 bytes leftover after parsing attributes in process `syz.1.945'. [ 295.097838][ T8686] netlink: 'syz.3.947': attribute type 10 has an invalid length. [ 295.105604][ T8686] netlink: 40 bytes leftover after parsing attributes in process `syz.3.947'. [ 295.659998][ T8702] netlink: 'syz.2.951': attribute type 21 has an invalid length. [ 296.318691][ T8711] netlink: 152 bytes leftover after parsing attributes in process `syz.3.956'. [ 296.883470][ T8719] syzkaller0: entered promiscuous mode [ 296.889533][ T8719] syzkaller0: entered allmulticast mode [ 299.112189][ T8739] netlink: 164 bytes leftover after parsing attributes in process `syz.1.968'. [ 299.121736][ T8741] netlink: 'syz.2.966': attribute type 21 has an invalid length. [ 300.059001][ T8767] netlink: 164 bytes leftover after parsing attributes in process `syz.0.978'. [ 300.150486][ T8768] netlink: 'syz.1.979': attribute type 9 has an invalid length. [ 300.173173][ T8768] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.979'. [ 300.824578][ T8776] netlink: 'syz.2.981': attribute type 21 has an invalid length. [ 302.977732][ T8795] netlink: 'syz.0.986': attribute type 3 has an invalid length. [ 302.997262][ T8795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.986'. [ 303.616190][ T8818] netlink: 'syz.2.997': attribute type 10 has an invalid length. [ 303.641712][ T8818] bridge0: port 4(dummy0) entered blocking state [ 303.648299][ T8818] bridge0: port 4(dummy0) entered forwarding state [ 303.663187][ T8818] dummy0: left allmulticast mode [ 303.669632][ T8818] dummy0: left promiscuous mode [ 303.692172][ T8818] bridge0: port 4(dummy0) entered disabled state [ 303.997424][ T8829] netlink: 'syz.1.1001': attribute type 3 has an invalid length. [ 304.006150][ T8829] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1001'. [ 306.845291][ T8853] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1007'. [ 306.914034][ T8853] netlink: 'syz.3.1007': attribute type 10 has an invalid length. [ 307.241140][ T8853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.424514][ T8853] žÿ: (slave batadv0): Enslaving as an active interface with an up link [ 307.717862][ T8866] netlink: 'syz.1.1011': attribute type 10 has an invalid length. [ 314.365228][ T8999] FAULT_INJECTION: forcing a failure. [ 314.365228][ T8999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.388102][ T8999] CPU: 0 PID: 8999 Comm: syz.0.1060 Not tainted syzkaller #0 [ 314.395578][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.405700][ T8999] Call Trace: [ 314.409027][ T8999] [ 314.412006][ T8999] dump_stack_lvl+0x18c/0x250 [ 314.416739][ T8999] ? show_regs_print_info+0x20/0x20 [ 314.422013][ T8999] ? load_image+0x400/0x400 [ 314.426588][ T8999] ? __might_fault+0xaa/0x120 [ 314.431319][ T8999] ? __lock_acquire+0x7d40/0x7d40 [ 314.436394][ T8999] should_fail_ex+0x39d/0x4d0 [ 314.441142][ T8999] _copy_from_user+0x2f/0xe0 [ 314.445780][ T8999] ___sys_sendmsg+0x1c7/0x360 [ 314.450516][ T8999] ? __sys_sendmsg+0x2a0/0x2a0 [ 314.455355][ T8999] ? trace_call_bpf+0xc3/0x6c0 [ 314.460210][ T8999] __se_sys_sendmsg+0x1c2/0x2b0 [ 314.465121][ T8999] ? __x64_sys_sendmsg+0x80/0x80 [ 314.470121][ T8999] ? lockdep_hardirqs_on+0x98/0x150 [ 314.475376][ T8999] do_syscall_64+0x55/0xa0 [ 314.479850][ T8999] ? clear_bhb_loop+0x40/0x90 [ 314.484585][ T8999] ? clear_bhb_loop+0x40/0x90 [ 314.489317][ T8999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.495257][ T8999] RIP: 0033:0x7f0a5079acb9 [ 314.499721][ T8999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.519408][ T8999] RSP: 002b:00007f0a5161e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.527899][ T8999] RAX: ffffffffffffffda RBX: 00007f0a50a15fa0 RCX: 00007f0a5079acb9 [ 314.535928][ T8999] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 314.543963][ T8999] RBP: 00007f0a5161e090 R08: 0000000000000000 R09: 0000000000000000 [ 314.551985][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.559997][ T8999] R13: 00007f0a50a16038 R14: 00007f0a50a15fa0 R15: 00007ffd3c8fc668 [ 314.568034][ T8999] [ 317.395502][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.402131][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.369370][ T9001] netlink: 'syz.0.1061': attribute type 13 has an invalid length. [ 318.377864][ T9001] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1061'. [ 318.402057][ T9001] erspan0: refused to change device tx_queue_len [ 318.409744][ T9001] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 319.444269][ T9036] netlink: 'syz.3.1075': attribute type 29 has an invalid length. [ 319.503566][ T9036] netlink: 'syz.3.1075': attribute type 29 has an invalid length. [ 319.579172][ T9034] syzkaller0: entered promiscuous mode [ 319.591627][ T9034] syzkaller0: entered allmulticast mode [ 319.664377][ T9040] netlink: 'syz.3.1075': attribute type 29 has an invalid length. [ 321.325988][ T9088] netlink: 'syz.0.1093': attribute type 29 has an invalid length. [ 321.547365][ T9088] netlink: 'syz.0.1093': attribute type 29 has an invalid length. [ 321.558137][ T9095] netlink: 'syz.0.1093': attribute type 29 has an invalid length. [ 321.567142][ T9095] FAULT_INJECTION: forcing a failure. [ 321.567142][ T9095] name failslab, interval 1, probability 0, space 0, times 0 [ 321.580529][ T9095] CPU: 0 PID: 9095 Comm: syz.0.1093 Not tainted syzkaller #0 [ 321.587957][ T9095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 321.598066][ T9095] Call Trace: [ 321.601407][ T9095] [ 321.604379][ T9095] dump_stack_lvl+0x18c/0x250 [ 321.609119][ T9095] ? show_regs_print_info+0x20/0x20 [ 321.614400][ T9095] ? load_image+0x400/0x400 [ 321.618961][ T9095] ? perf_trace_lock_acquire+0x104/0x410 [ 321.624656][ T9095] should_fail_ex+0x39d/0x4d0 [ 321.629403][ T9095] should_failslab+0x9/0x20 [ 321.633962][ T9095] slab_pre_alloc_hook+0x59/0x310 [ 321.639064][ T9095] kmem_cache_alloc+0x5a/0x2d0 [ 321.643912][ T9095] ? skb_clone+0x1eb/0x370 [ 321.648383][ T9095] skb_clone+0x1eb/0x370 [ 321.652690][ T9095] __netlink_deliver_tap+0x41c/0x830 [ 321.658066][ T9095] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.663369][ T9095] netlink_deliver_tap+0x19c/0x1b0 [ 321.668535][ T9095] netlink_dump+0x94b/0xe50 [ 321.673106][ T9095] ? netlink_lookup+0x200/0x200 [ 321.678031][ T9095] ? slab_free_freelist_hook+0x130/0x1a0 [ 321.683714][ T9095] ? netlink_recvmsg+0x5e7/0xe60 [ 321.688697][ T9095] ? kmem_cache_free+0xf8/0x270 [ 321.693611][ T9095] netlink_recvmsg+0x693/0xe60 [ 321.698446][ T9095] ? netlink_sendmsg+0xbf0/0xbf0 [ 321.703445][ T9095] ? aa_af_perm+0x330/0x330 [ 321.708031][ T9095] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 321.713384][ T9095] ? security_socket_recvmsg+0x89/0xb0 [ 321.718896][ T9095] ? netlink_sendmsg+0xbf0/0xbf0 [ 321.723884][ T9095] ____sys_recvmsg+0x2ce/0x5e0 [ 321.728731][ T9095] ? __sys_recvmsg_sock+0x50/0x50 [ 321.733856][ T9095] ? import_iovec+0x73/0xa0 [ 321.738428][ T9095] ___sys_recvmsg+0x216/0x590 [ 321.743175][ T9095] ? __sys_recvmsg+0x2a0/0x2a0 [ 321.747992][ T9095] ? trace_call_bpf+0xc3/0x6c0 [ 321.752808][ T9095] ? trace_call_bpf+0x5e9/0x6c0 [ 321.757737][ T9095] ? __fget_files+0x43d/0x4b0 [ 321.762488][ T9095] __x64_sys_recvmsg+0x20c/0x2e0 [ 321.767474][ T9095] ? perf_trace_preemptirq_template+0x269/0x330 [ 321.773772][ T9095] ? ___sys_recvmsg+0x590/0x590 [ 321.778692][ T9095] ? lockdep_hardirqs_on+0x98/0x150 [ 321.783976][ T9095] do_syscall_64+0x55/0xa0 [ 321.788440][ T9095] ? clear_bhb_loop+0x40/0x90 [ 321.793167][ T9095] ? clear_bhb_loop+0x40/0x90 [ 321.797901][ T9095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.803852][ T9095] RIP: 0033:0x7f0a5079acb9 [ 321.808309][ T9095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.827969][ T9095] RSP: 002b:00007f0a515fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 321.836435][ T9095] RAX: ffffffffffffffda RBX: 00007f0a50a16090 RCX: 00007f0a5079acb9 [ 321.844458][ T9095] RDX: 0000000040012100 RSI: 0000200000000180 RDI: 0000000000000003 [ 321.852494][ T9095] RBP: 00007f0a515fd090 R08: 0000000000000000 R09: 0000000000000000 [ 321.860529][ T9095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 321.868563][ T9095] R13: 00007f0a50a16128 R14: 00007f0a50a16090 R15: 00007ffd3c8fc668 [ 321.876621][ T9095] [ 322.768439][ T9124] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1103'. [ 322.887055][ T9124] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1103'. [ 322.900176][ T9121] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1103'. [ 324.971996][ T9155] netlink: 'syz.1.1114': attribute type 29 has an invalid length. [ 326.822554][ T9149] netlink: 'syz.2.1113': attribute type 10 has an invalid length. [ 326.839694][ T9149] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.857267][ T9149] bridge_slave_1: left allmulticast mode [ 326.865783][ T9149] bridge_slave_1: left promiscuous mode [ 326.872157][ T9149] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.883995][ T9155] netlink: 'syz.1.1114': attribute type 29 has an invalid length. [ 330.568697][ T9180] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1121'. [ 330.989791][ T9186] netlink: 'syz.3.1127': attribute type 29 has an invalid length. [ 331.019620][ T9186] netlink: 'syz.3.1127': attribute type 29 has an invalid length. [ 331.045685][ T9192] netlink: 'syz.3.1127': attribute type 29 has an invalid length. [ 331.275614][ T9191] netlink: 'syz.2.1128': attribute type 9 has an invalid length. [ 331.283545][ T9191] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1128'. [ 331.370669][ T9187] netlink: 'syz.0.1124': attribute type 10 has an invalid length. [ 331.398204][ T9190] delete_channel: no stack [ 331.426424][ T9187] bridge_slave_1: left allmulticast mode [ 331.446535][ T9187] bridge_slave_1: left promiscuous mode [ 331.466880][ T9187] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.729599][ T9201] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1130'. [ 331.759896][ T9201] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1130'. [ 331.771278][ T9204] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1130'. [ 331.782238][ T9201] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1130'. [ 333.269211][ T9226] netlink: 'syz.3.1140': attribute type 10 has an invalid length. [ 333.301961][ T9226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.602237][ T9226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.912268][ T9226] žÿ: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 334.428002][ T9251] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1144'. [ 335.526985][ T9265] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 336.077942][ T9269] netlink: 'syz.1.1154': attribute type 10 has an invalid length. [ 336.204317][ T9269] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 337.120354][ T9293] Ÿë: port 1(gretap0) entered blocking state [ 337.145508][ T9293] Ÿë: port 1(gretap0) entered disabled state [ 337.158095][ T9293] gretap0: entered allmulticast mode [ 337.184866][ T9293] gretap0: entered promiscuous mode [ 339.090173][ T9320] netlink: 'syz.3.1173': attribute type 10 has an invalid length. [ 339.107957][ T9320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1173'. [ 339.128673][ T9320] vcan0: entered promiscuous mode [ 339.139807][ T9320] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 339.432285][ T9341] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.551876][ T9341] netlink: 'syz.3.1178': attribute type 10 has an invalid length. [ 339.747104][ T9341] žÿ: (slave wlan1): Enslaving as an active interface with an up link [ 340.599810][ T9359] netlink: 'syz.3.1183': attribute type 10 has an invalid length. [ 340.637729][ T9359] bridge_slave_1: left allmulticast mode [ 340.652105][ T9359] bridge_slave_1: left promiscuous mode [ 340.677974][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.761947][ T9369] netlink: 'syz.0.1186': attribute type 21 has an invalid length. [ 343.772267][ T9389] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1195'. [ 344.205807][ T9404] netlink: 'syz.1.1202': attribute type 10 has an invalid length. [ 344.214346][ T9404] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1202'. [ 344.424553][ T9410] FAULT_INJECTION: forcing a failure. [ 344.424553][ T9410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.458445][ T9410] CPU: 0 PID: 9410 Comm: syz.3.1203 Not tainted syzkaller #0 [ 344.465908][ T9410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.476005][ T9410] Call Trace: [ 344.479314][ T9410] [ 344.482271][ T9410] dump_stack_lvl+0x18c/0x250 [ 344.486989][ T9410] ? show_regs_print_info+0x20/0x20 [ 344.492213][ T9410] ? load_image+0x400/0x400 [ 344.496759][ T9410] ? __might_fault+0xaa/0x120 [ 344.501480][ T9410] ? __lock_acquire+0x7d40/0x7d40 [ 344.506547][ T9410] should_fail_ex+0x39d/0x4d0 [ 344.511267][ T9410] _copy_from_user+0x2f/0xe0 [ 344.515897][ T9410] do_ipv6_setsockopt+0x3a2/0x3e20 [ 344.521061][ T9410] ? sk_dst_reset+0xa0/0xa0 [ 344.525590][ T9410] ? mark_lock+0x94/0x320 [ 344.529953][ T9410] ? __lock_acquire+0x1273/0x7d40 [ 344.535027][ T9410] ? verify_lock_unused+0x140/0x140 [ 344.540266][ T9410] ? mark_lock+0x94/0x320 [ 344.544632][ T9410] ? __lock_acquire+0x1273/0x7d40 [ 344.549696][ T9410] ? aa_label_sk_perm+0x463/0x5c0 [ 344.554769][ T9410] ? aa_sk_perm+0x970/0x970 [ 344.559333][ T9410] ? __might_sleep+0xe0/0xe0 [ 344.563959][ T9410] ? ksys_write+0x1c4/0x260 [ 344.568504][ T9410] ipv6_setsockopt+0x59/0x190 [ 344.573250][ T9410] dccp_setsockopt+0x166/0x830 [ 344.578045][ T9410] ? aa_af_perm+0x330/0x330 [ 344.582588][ T9410] ? dccp_ioctl+0x200/0x200 [ 344.587118][ T9410] ? __fget_files+0x28/0x4b0 [ 344.591770][ T9410] ? aa_sock_opt_perm+0x74/0x100 [ 344.596745][ T9410] ? sock_common_setsockopt+0x36/0xc0 [ 344.602142][ T9410] ? sock_common_recvmsg+0x190/0x190 [ 344.607471][ T9410] do_sock_setsockopt+0x175/0x1a0 [ 344.612536][ T9410] ? __fdget+0x180/0x210 [ 344.616828][ T9410] __x64_sys_setsockopt+0x182/0x200 [ 344.622089][ T9410] do_syscall_64+0x55/0xa0 [ 344.626536][ T9410] ? clear_bhb_loop+0x40/0x90 [ 344.631246][ T9410] ? clear_bhb_loop+0x40/0x90 [ 344.635950][ T9410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.641874][ T9410] RIP: 0033:0x7f4063f9acb9 [ 344.646312][ T9410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.665946][ T9410] RSP: 002b:00007f4064dba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 344.674389][ T9410] RAX: ffffffffffffffda RBX: 00007f4064216090 RCX: 00007f4063f9acb9 [ 344.682393][ T9410] RDX: 0000000000000018 RSI: 0000000000000029 RDI: 0000000000000004 [ 344.690400][ T9410] RBP: 00007f4064dba090 R08: 0000000000000120 R09: 0000000000000000 [ 344.698401][ T9410] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 344.706394][ T9410] R13: 00007f4064216128 R14: 00007f4064216090 R15: 00007fff584af148 [ 344.714409][ T9410] [ 345.450912][ T9420] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1206'. [ 348.271983][ T9450] netlink: 'syz.2.1218': attribute type 1 has an invalid length. [ 348.280524][ T9450] netlink: 'syz.2.1218': attribute type 4 has an invalid length. [ 348.288673][ T9450] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1218'. [ 348.298957][ T9455] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1220'. [ 348.598245][ T9464] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 348.617911][ T9464] dvmrp1: linktype set to 825 [ 348.667890][ T9459] netlink: 'syz.0.1222': attribute type 2 has an invalid length. [ 348.688386][ T9459] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 348.712966][ T9459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1222'. [ 349.979677][ T9489] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 350.086191][ T9491] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1232'. [ 350.129474][ T9489] netlink: 'syz.2.1230': attribute type 10 has an invalid length. [ 351.052505][ T9489] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 351.812268][ T9526] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1244'. [ 354.595737][ T9544] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 354.605106][ T9547] netlink: 'syz.1.1251': attribute type 10 has an invalid length. [ 354.812192][ T9558] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1255'. [ 355.459919][ T9582] netlink: 'syz.2.1263': attribute type 10 has an invalid length. [ 358.456004][ T9586] bond0: entered promiscuous mode [ 358.467961][ T9586] bond_slave_1: entered promiscuous mode [ 358.473944][ T9586] batadv0: entered promiscuous mode [ 358.495156][ T9586] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 358.794815][ T9602] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1267'. [ 360.370795][ T9624] netlink: 'syz.2.1274': attribute type 21 has an invalid length. [ 360.472879][ T9620] batadv_slave_1: mtu greater than device maximum [ 360.746573][ T9633] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1278'. [ 361.743600][ T9658] netlink: 'syz.1.1287': attribute type 21 has an invalid length. [ 361.763922][ T9658] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1287'. [ 361.794899][ T9658] netlink: 'syz.1.1287': attribute type 16 has an invalid length. [ 361.826973][ T9658] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1287'. [ 362.093702][ T9670] FAULT_INJECTION: forcing a failure. [ 362.093702][ T9670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.113662][ T9670] CPU: 0 PID: 9670 Comm: syz.1.1292 Not tainted syzkaller #0 [ 362.121123][ T9670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.131225][ T9670] Call Trace: [ 362.134537][ T9670] [ 362.137489][ T9670] dump_stack_lvl+0x18c/0x250 [ 362.142208][ T9670] ? show_regs_print_info+0x20/0x20 [ 362.147435][ T9670] ? load_image+0x400/0x400 [ 362.151975][ T9670] ? __might_fault+0xaa/0x120 [ 362.156678][ T9670] ? __lock_acquire+0x7d40/0x7d40 [ 362.161736][ T9670] should_fail_ex+0x39d/0x4d0 [ 362.166475][ T9670] _copy_from_user+0x2f/0xe0 [ 362.171104][ T9670] ___sys_sendmsg+0x1c7/0x360 [ 362.175818][ T9670] ? __sys_sendmsg+0x2a0/0x2a0 [ 362.180656][ T9670] ? trace_call_bpf+0xc3/0x6c0 [ 362.185494][ T9670] __se_sys_sendmsg+0x1c2/0x2b0 [ 362.190389][ T9670] ? __x64_sys_sendmsg+0x80/0x80 [ 362.195370][ T9670] ? lockdep_hardirqs_on+0x98/0x150 [ 362.200609][ T9670] do_syscall_64+0x55/0xa0 [ 362.205054][ T9670] ? clear_bhb_loop+0x40/0x90 [ 362.209766][ T9670] ? clear_bhb_loop+0x40/0x90 [ 362.214468][ T9670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.220406][ T9670] RIP: 0033:0x7f4bc379acb9 [ 362.224851][ T9670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.244486][ T9670] RSP: 002b:00007f4bc460e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.252928][ T9670] RAX: ffffffffffffffda RBX: 00007f4bc3a15fa0 RCX: 00007f4bc379acb9 [ 362.260922][ T9670] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000003 [ 362.268920][ T9670] RBP: 00007f4bc460e090 R08: 0000000000000000 R09: 0000000000000000 [ 362.276921][ T9670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.284913][ T9670] R13: 00007f4bc3a16038 R14: 00007f4bc3a15fa0 R15: 00007ffe4a462ab8 [ 362.292923][ T9670] [ 362.541792][ T9667] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1291'. [ 362.696598][ T9672] syzkaller0: entered promiscuous mode [ 362.777032][ T9672] syzkaller0: entered allmulticast mode [ 367.456869][ T9718] netlink: 'syz.0.1303': attribute type 21 has an invalid length. [ 367.474967][ T9718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.483072][ T9718] IPv6: NLM_F_CREATE should be set when creating new route [ 367.490790][ T9718] IPv6: NLM_F_CREATE should be set when creating new route [ 372.747076][ T9788] netlink: 'syz.0.1325': attribute type 21 has an invalid length. [ 372.961118][ T9797] FAULT_INJECTION: forcing a failure. [ 372.961118][ T9797] name failslab, interval 1, probability 0, space 0, times 0 [ 372.974355][ T9797] CPU: 1 PID: 9797 Comm: syz.1.1329 Not tainted syzkaller #0 [ 372.981813][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.991933][ T9797] Call Trace: [ 372.995281][ T9797] [ 372.998272][ T9797] dump_stack_lvl+0x18c/0x250 [ 373.003032][ T9797] ? rt6_nlmsg_size+0xd0/0x490 [ 373.007864][ T9797] ? show_regs_print_info+0x20/0x20 [ 373.013128][ T9797] ? load_image+0x400/0x400 [ 373.017713][ T9797] ? rt6_nlmsg_size+0xd0/0x490 [ 373.022554][ T9797] ? __lock_acquire+0x7d40/0x7d40 [ 373.027663][ T9797] should_fail_ex+0x39d/0x4d0 [ 373.032420][ T9797] should_failslab+0x9/0x20 [ 373.036970][ T9797] slab_pre_alloc_hook+0x59/0x310 [ 373.042044][ T9797] ? rt6_nlmsg_size+0x404/0x490 [ 373.046947][ T9797] kmem_cache_alloc_node+0x60/0x320 [ 373.052186][ T9797] ? __alloc_skb+0x103/0x2c0 [ 373.056834][ T9797] __alloc_skb+0x103/0x2c0 [ 373.061314][ T9797] inet6_rt_notify+0xb4/0x240 [ 373.066061][ T9797] fib6_del+0x10d2/0x1580 [ 373.070468][ T9797] ? fib6_locate_1+0x6c0/0x6c0 [ 373.075273][ T9797] ? perf_trace_lock+0xfc/0x3b0 [ 373.080195][ T9797] fib6_clean_node+0x297/0x540 [ 373.085007][ T9797] ? node_free_rcu+0x30/0x30 [ 373.089656][ T9797] ? __local_bh_enable_ip+0x13a/0x1c0 [ 373.095084][ T9797] fib6_walk_continue+0x672/0x900 [ 373.100173][ T9797] fib6_walk+0x149/0x290 [ 373.104460][ T9797] __fib6_clean_all+0x283/0x3e0 [ 373.109349][ T9797] ? __fib6_clean_all+0xb2/0x3e0 [ 373.114327][ T9797] ? rt6_sync_down_dev+0x160/0x160 [ 373.119496][ T9797] ? fib6_clean_all+0x30/0x30 [ 373.124210][ T9797] ? node_free_rcu+0x30/0x30 [ 373.128835][ T9797] ? rt6_sync_down_dev+0x160/0x160 [ 373.133992][ T9797] ? trace_event_raw_event_lock+0x250/0x250 [ 373.139948][ T9797] rt6_disable_ip+0x12d/0x7b0 [ 373.144689][ T9797] ? fib6_ifdown+0x4b0/0x4b0 [ 373.149328][ T9797] ? __lock_acquire+0x7d40/0x7d40 [ 373.154386][ T9797] ? rcu_is_watching+0x15/0xb0 [ 373.159209][ T9797] addrconf_ifdown+0x16c/0x18c0 [ 373.164108][ T9797] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 373.169791][ T9797] ? tls_dev_event+0x74d/0xf40 [ 373.174611][ T9797] ? addrconf_cleanup+0x1e0/0x1e0 [ 373.179721][ T9797] addrconf_notify+0x6c6/0x1010 [ 373.184629][ T9797] notifier_call_chain+0x197/0x380 [ 373.189797][ T9797] dev_set_mtu_ext+0x463/0x680 [ 373.194618][ T9797] ? dev_validate_mtu+0x170/0x170 [ 373.199675][ T9797] ? perf_trace_lock+0xfc/0x3b0 [ 373.204589][ T9797] ? cfg80211_netdev_notifier_call+0xd92/0x13f0 [ 373.210869][ T9797] ? perf_trace_lock_acquire+0x34f/0x410 [ 373.216567][ T9797] dev_set_mtu+0xec/0x1c0 [ 373.220945][ T9797] ? dev_set_mtu_ext+0x680/0x680 [ 373.225950][ T9797] ? bond_netdev_event+0xeb/0xf30 [ 373.231037][ T9797] macvlan_device_event+0x311/0x890 [ 373.236282][ T9797] ? macvlan_get_link_net+0x70/0x70 [ 373.241533][ T9797] notifier_call_chain+0x197/0x380 [ 373.246695][ T9797] dev_set_mtu_ext+0x463/0x680 [ 373.251503][ T9797] ? dev_validate_mtu+0x170/0x170 [ 373.256589][ T9797] ? __mutex_trylock_common+0x159/0x260 [ 373.262191][ T9797] ? trace_raw_output_contention_end+0xd0/0xd0 [ 373.268399][ T9797] dev_set_mtu+0xec/0x1c0 [ 373.272771][ T9797] ? dev_set_mtu_ext+0x680/0x680 [ 373.277782][ T9797] ? __dev_get_by_name+0xe5/0x130 [ 373.282853][ T9797] ? dev_ifsioc+0x4f9/0xc40 [ 373.287402][ T9797] dev_ioctl+0x7b4/0x1140 [ 373.291791][ T9797] sock_do_ioctl+0x239/0x310 [ 373.296426][ T9797] ? sock_show_fdinfo+0xb0/0xb0 [ 373.301350][ T9797] sock_ioctl+0x5ba/0x7e0 [ 373.305721][ T9797] ? sock_poll+0x3e0/0x3e0 [ 373.310198][ T9797] ? bpf_lsm_file_ioctl+0x9/0x10 [ 373.315173][ T9797] ? security_file_ioctl+0x80/0xa0 [ 373.320333][ T9797] ? sock_poll+0x3e0/0x3e0 [ 373.324802][ T9797] __se_sys_ioctl+0xfd/0x170 [ 373.329440][ T9797] do_syscall_64+0x55/0xa0 [ 373.333894][ T9797] ? clear_bhb_loop+0x40/0x90 [ 373.338614][ T9797] ? clear_bhb_loop+0x40/0x90 [ 373.343333][ T9797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.349262][ T9797] RIP: 0033:0x7f4bc379acb9 [ 373.353708][ T9797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.373354][ T9797] RSP: 002b:00007f4bc460e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.381828][ T9797] RAX: ffffffffffffffda RBX: 00007f4bc3a15fa0 RCX: 00007f4bc379acb9 [ 373.390094][ T9797] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000004 [ 373.398104][ T9797] RBP: 00007f4bc460e090 R08: 0000000000000000 R09: 0000000000000000 [ 373.406103][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 373.414115][ T9797] R13: 00007f4bc3a16038 R14: 00007f4bc3a15fa0 R15: 00007ffe4a462ab8 [ 373.422146][ T9797] [ 374.378839][ T9818] FAULT_INJECTION: forcing a failure. [ 374.378839][ T9818] name failslab, interval 1, probability 0, space 0, times 0 [ 374.397954][ T9818] CPU: 1 PID: 9818 Comm: syz.1.1338 Not tainted syzkaller #0 [ 374.405438][ T9818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.415554][ T9818] Call Trace: [ 374.418872][ T9818] [ 374.421838][ T9818] dump_stack_lvl+0x18c/0x250 [ 374.426560][ T9818] ? show_regs_print_info+0x20/0x20 [ 374.431789][ T9818] ? load_image+0x400/0x400 [ 374.436345][ T9818] ? __might_sleep+0xe0/0xe0 [ 374.440973][ T9818] ? __lock_acquire+0x7d40/0x7d40 [ 374.446034][ T9818] ? __kmem_cache_free+0xba/0x1e0 [ 374.451106][ T9818] should_fail_ex+0x39d/0x4d0 [ 374.455854][ T9818] should_failslab+0x9/0x20 [ 374.460434][ T9818] slab_pre_alloc_hook+0x59/0x310 [ 374.465512][ T9818] ? __netdev_printk+0x4a0/0x4a0 [ 374.470494][ T9818] ? register_netdevice+0x574/0x1b90 [ 374.475817][ T9818] __kmem_cache_alloc_node+0x53/0x250 [ 374.481255][ T9818] ? register_netdevice+0x574/0x1b90 [ 374.486576][ T9818] kmalloc_trace+0x2a/0xe0 [ 374.491033][ T9818] register_netdevice+0x574/0x1b90 [ 374.496193][ T9818] ? __kmem_cache_alloc_node+0x13a/0x250 [ 374.501875][ T9818] ? kvmalloc_node+0x70/0x180 [ 374.506598][ T9818] ? netif_stacked_transfer_operstate+0x210/0x210 [ 374.513093][ T9818] ? __asan_memset+0x22/0x40 [ 374.517726][ T9818] ? alloc_netdev_mqs+0xbb7/0x1040 [ 374.522878][ T9818] ? __asan_memcpy+0x40/0x70 [ 374.527534][ T9818] ? alloc_netdev_mqs+0xca6/0x1040 [ 374.532676][ T9818] ? __ip_tunnel_create+0x386/0x4d0 [ 374.537929][ T9818] __ip_tunnel_create+0x3bc/0x4d0 [ 374.542995][ T9818] ? ip_tunnel_init_net+0x790/0x790 [ 374.548234][ T9818] ? bpf_lsm_capable+0x9/0x10 [ 374.552959][ T9818] ? security_capable+0x89/0xb0 [ 374.557857][ T9818] ip_tunnel_ctl+0x98c/0x1970 [ 374.562623][ T9818] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 374.568242][ T9818] ? dev_ioctl+0x83c/0x1140 [ 374.572825][ T9818] ? ip_tunnel_update+0xb10/0xb10 [ 374.577946][ T9818] ? dev_ifsioc+0x958/0xc40 [ 374.582499][ T9818] dev_ioctl+0x84c/0x1140 [ 374.586881][ T9818] sock_ioctl+0x74c/0x7e0 [ 374.591261][ T9818] ? sock_poll+0x3e0/0x3e0 [ 374.595746][ T9818] ? bpf_lsm_file_ioctl+0x9/0x10 [ 374.600721][ T9818] ? security_file_ioctl+0x80/0xa0 [ 374.605878][ T9818] ? sock_poll+0x3e0/0x3e0 [ 374.610337][ T9818] __se_sys_ioctl+0xfd/0x170 [ 374.614979][ T9818] do_syscall_64+0x55/0xa0 [ 374.619424][ T9818] ? clear_bhb_loop+0x40/0x90 [ 374.624144][ T9818] ? clear_bhb_loop+0x40/0x90 [ 374.628871][ T9818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.634810][ T9818] RIP: 0033:0x7f4bc379acb9 [ 374.639264][ T9818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.658921][ T9818] RSP: 002b:00007f4bc460e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.667370][ T9818] RAX: ffffffffffffffda RBX: 00007f4bc3a15fa0 RCX: 00007f4bc379acb9 [ 374.675377][ T9818] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 374.683380][ T9818] RBP: 00007f4bc460e090 R08: 0000000000000000 R09: 0000000000000000 [ 374.691389][ T9818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.699398][ T9818] R13: 00007f4bc3a16038 R14: 00007f4bc3a15fa0 R15: 00007ffe4a462ab8 [ 374.707430][ T9818] [ 374.973985][ T9828] netlink: 'syz.0.1340': attribute type 9 has an invalid length. [ 375.003527][ T9828] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1340'. [ 375.444039][ T9836] netlink: 'syz.3.1341': attribute type 21 has an invalid length. [ 378.202976][ T9857] syz.3.1350 (9857) used obsolete PPPIOCDETACH ioctl [ 378.546032][ T9878] netlink: 'syz.2.1355': attribute type 21 has an invalid length. [ 378.847572][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.854007][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.115472][ T9886] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1360'. [ 379.156017][ T9890] netlink: 'syz.3.1361': attribute type 9 has an invalid length. [ 379.166595][ T9890] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1361'. [ 379.823786][ T9902] netlink: 'syz.1.1365': attribute type 4 has an invalid length. [ 379.838028][ T9902] netlink: 'syz.1.1365': attribute type 16 has an invalid length. [ 379.845908][ T9902] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1365'. [ 379.860067][ T9902] netlink: 'syz.1.1365': attribute type 31 has an invalid length. [ 379.878144][ T9902] netlink: 'syz.1.1365': attribute type 1 has an invalid length. [ 380.248771][ T9912] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1370'. [ 380.501500][ T9921] netlink: 'syz.0.1372': attribute type 21 has an invalid length. [ 381.448289][ T9939] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 381.454168][ T9939] pim6reg0: persist enabled [ 381.601837][ T9945] bond_slave_1: mtu less than device minimum [ 382.082923][ T9955] syzkaller0: entered promiscuous mode [ 382.094671][ T9955] syzkaller0: entered allmulticast mode [ 384.550618][ T9971] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1392'. [ 384.568070][ T9983] netlink: 'syz.2.1395': attribute type 21 has an invalid length. [ 384.717140][ T9986] netlink: 'syz.0.1397': attribute type 3 has an invalid length. [ 384.733860][ T9986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1397'. [ 385.434292][T10006] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1405'. [ 385.647552][T10008] syzkaller0: entered promiscuous mode [ 385.666241][T10008] syzkaller0: entered allmulticast mode [ 385.675246][T10016] FAULT_INJECTION: forcing a failure. [ 385.675246][T10016] name failslab, interval 1, probability 0, space 0, times 0 [ 385.692949][T10016] CPU: 1 PID: 10016 Comm: syz.2.1407 Not tainted syzkaller #0 [ 385.700606][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.710700][T10016] Call Trace: [ 385.714012][T10016] [ 385.716969][T10016] dump_stack_lvl+0x18c/0x250 [ 385.721684][T10016] ? show_regs_print_info+0x20/0x20 [ 385.726915][T10016] ? load_image+0x400/0x400 [ 385.731450][T10016] ? __might_sleep+0xe0/0xe0 [ 385.736063][T10016] ? __lock_acquire+0x7d40/0x7d40 [ 385.741114][T10016] ? prepend_path+0x4b/0x960 [ 385.745726][T10016] should_fail_ex+0x39d/0x4d0 [ 385.750446][T10016] should_failslab+0x9/0x20 [ 385.754986][T10016] slab_pre_alloc_hook+0x59/0x310 [ 385.760047][T10016] ? __asan_memcpy+0x40/0x70 [ 385.764666][T10016] ? tomoyo_encode+0x28b/0x540 [ 385.769466][T10016] ? tomoyo_encode+0x28b/0x540 [ 385.774257][T10016] __kmem_cache_alloc_node+0x53/0x250 [ 385.779654][T10016] ? prepend_path+0x4b/0x960 [ 385.784296][T10016] ? tomoyo_encode+0x28b/0x540 [ 385.789124][T10016] __kmalloc+0xa4/0x230 [ 385.793341][T10016] tomoyo_encode+0x28b/0x540 [ 385.797974][T10016] tomoyo_realpath_from_path+0x592/0x5d0 [ 385.803646][T10016] tomoyo_path_number_perm+0x248/0x620 [ 385.809138][T10016] ? tomoyo_path_number_perm+0x217/0x620 [ 385.814805][T10016] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 385.820294][T10016] ? ksys_write+0x1c4/0x260 [ 385.824877][T10016] ? __fget_files+0x28/0x4b0 [ 385.829505][T10016] ? __fget_files+0x28/0x4b0 [ 385.834136][T10016] security_file_ioctl+0x70/0xa0 [ 385.839111][T10016] __se_sys_ioctl+0x48/0x170 [ 385.843775][T10016] do_syscall_64+0x55/0xa0 [ 385.848238][T10016] ? clear_bhb_loop+0x40/0x90 [ 385.852959][T10016] ? clear_bhb_loop+0x40/0x90 [ 385.857679][T10016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.863660][T10016] RIP: 0033:0x7fdde219acb9 [ 385.868098][T10016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.887775][T10016] RSP: 002b:00007fdde3036028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.896221][T10016] RAX: ffffffffffffffda RBX: 00007fdde2416090 RCX: 00007fdde219acb9 [ 385.904230][T10016] RDX: 0000200000000040 RSI: 00000000400454d9 RDI: 0000000000000003 [ 385.912240][T10016] RBP: 00007fdde3036090 R08: 0000000000000000 R09: 0000000000000000 [ 385.920256][T10016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.928254][T10016] R13: 00007fdde2416128 R14: 00007fdde2416090 R15: 00007ffc34459698 [ 385.936268][T10016] [ 385.947746][T10016] ERROR: Out of memory at tomoyo_realpath_from_path. [ 386.155865][T10018] netlink: 'syz.3.1408': attribute type 21 has an invalid length. [ 386.297138][T10022] netlink: 'syz.1.1411': attribute type 3 has an invalid length. [ 386.314111][T10022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1411'. [ 388.696130][T10042] syzkaller0: entered promiscuous mode [ 388.703163][T10042] syzkaller0: entered allmulticast mode [ 388.894799][T10047] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1418'. [ 389.243982][T10052] cgroup: fork rejected by pids controller in /syz2 [ 391.077898][T10148] netlink: 'syz.1.1422': attribute type 21 has an invalid length. [ 391.214561][T10163] netlink: 'syz.0.1424': attribute type 3 has an invalid length. [ 391.244026][T10163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1424'. [ 393.334804][T10191] sctp: [Deprecated]: syz.1.1434 (pid 10191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 393.334804][T10191] Use struct sctp_sack_info instead [ 393.403386][ T5081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.428074][ T5081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.438213][ T5081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.457020][ T5081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.493403][ T5081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 393.513211][ T5081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.384859][T10182] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 395.393116][T10182] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 395.400629][T10182] veth0_to_bridge: entered allmulticast mode [ 395.408696][T10182] veth0_to_bridge: entered promiscuous mode [ 395.630546][ T5770] Bluetooth: hci1: command tx timeout [ 397.250727][ T6222] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.427409][T10204] netlink: 'syz.0.1437': attribute type 3 has an invalid length. [ 397.443474][ T6222] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.446111][T10204] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1437'. [ 397.696129][ T6222] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.708075][ T5770] Bluetooth: hci1: command tx timeout [ 397.933710][ T6222] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.952922][T10207] netlink: 'syz.3.1436': attribute type 21 has an invalid length. [ 397.977232][T10192] chnl_net:caif_netlink_parms(): no params data found [ 398.374073][T10192] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.403525][T10192] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.412367][T10192] bridge_slave_0: entered allmulticast mode [ 398.420336][T10192] bridge_slave_0: entered promiscuous mode [ 398.463687][T10192] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.480915][T10192] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.508584][T10192] bridge_slave_1: entered allmulticast mode [ 398.528786][T10192] bridge_slave_1: entered promiscuous mode [ 398.617471][T10192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.750809][T10192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.080904][T10243] netlink: 'syz.1.1449': attribute type 3 has an invalid length. [ 399.139978][T10243] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1449'. [ 399.279191][T10192] team0: Port device team_slave_0 added [ 399.788190][ T5770] Bluetooth: hci1: command tx timeout [ 401.705893][T10192] team0: Port device team_slave_1 added [ 401.749335][T10263] nicvf0: tun_chr_ioctl cmd 1074025680 [ 401.904928][ T5770] Bluetooth: hci1: command tx timeout [ 402.385118][T10271] netlink: 'syz.0.1453': attribute type 33 has an invalid length. [ 402.396931][T10271] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1453'. [ 402.417160][T10192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.437574][T10192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.464885][T10192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.478906][T10281] netlink: 'syz.3.1454': attribute type 21 has an invalid length. [ 402.551359][T10192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.569007][T10192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.622544][T10192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.808662][T10192] hsr_slave_0: entered promiscuous mode [ 402.827245][T10192] hsr_slave_1: entered promiscuous mode [ 402.843206][T10192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.867736][T10192] Cannot create hsr debugfs directory [ 402.950482][T10293] netlink: 'syz.0.1460': attribute type 3 has an invalid length. [ 402.961497][T10293] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1460'. [ 403.449075][T10304] FAULT_INJECTION: forcing a failure. [ 403.449075][T10304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.493261][T10304] CPU: 1 PID: 10304 Comm: syz.0.1463 Not tainted syzkaller #0 [ 403.500822][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.510939][T10304] Call Trace: [ 403.514265][T10304] [ 403.517242][T10304] dump_stack_lvl+0x18c/0x250 [ 403.521991][T10304] ? show_regs_print_info+0x20/0x20 [ 403.527265][T10304] ? load_image+0x400/0x400 [ 403.531847][T10304] ? __lock_acquire+0x7d40/0x7d40 [ 403.536925][T10304] ? snprintf+0xe9/0x140 [ 403.541226][T10304] should_fail_ex+0x39d/0x4d0 [ 403.545969][T10304] _copy_to_user+0x2f/0xa0 [ 403.550450][T10304] simple_read_from_buffer+0xe7/0x150 [ 403.555975][T10304] proc_fail_nth_read+0x1e8/0x260 [ 403.561096][T10304] ? proc_fault_inject_write+0x360/0x360 [ 403.566801][T10304] ? fsnotify_perm+0x271/0x5e0 [ 403.571626][T10304] ? proc_fault_inject_write+0x360/0x360 [ 403.577323][T10304] vfs_read+0x28b/0x970 [ 403.581543][T10304] ? kernel_read+0x1e0/0x1e0 [ 403.586189][T10304] ? __fget_files+0x28/0x4b0 [ 403.590824][T10304] ? __fget_files+0x28/0x4b0 [ 403.595461][T10304] ? __fget_files+0x43d/0x4b0 [ 403.600213][T10304] ? __fdget_pos+0x2a3/0x330 [ 403.604854][T10304] ? ksys_read+0x75/0x260 [ 403.609250][T10304] ksys_read+0x150/0x260 [ 403.613555][T10304] ? vfs_write+0x990/0x990 [ 403.618021][T10304] ? lockdep_hardirqs_on+0x98/0x150 [ 403.623294][T10304] do_syscall_64+0x55/0xa0 [ 403.627756][T10304] ? clear_bhb_loop+0x40/0x90 [ 403.632482][T10304] ? clear_bhb_loop+0x40/0x90 [ 403.637234][T10304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.643177][T10304] RIP: 0033:0x7f0a5075b58e [ 403.647640][T10304] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 403.667360][T10304] RSP: 002b:00007f0a5161dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 403.675849][T10304] RAX: ffffffffffffffda RBX: 00007f0a5161e6c0 RCX: 00007f0a5075b58e [ 403.683879][T10304] RDX: 000000000000000f RSI: 00007f0a5161e0a0 RDI: 0000000000000004 [ 403.691904][T10304] RBP: 00007f0a5161e090 R08: 0000000000000000 R09: 0000000000000000 [ 403.699928][T10304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.707964][T10304] R13: 00007f0a50a16038 R14: 00007f0a50a15fa0 R15: 00007ffd3c8fc668 [ 403.716039][T10304] [ 404.092538][T10317] netlink: 'syz.0.1464': attribute type 10 has an invalid length. [ 404.106493][T10317] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1464'. [ 404.156294][T10321] FAULT_INJECTION: forcing a failure. [ 404.156294][T10321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.177849][T10321] CPU: 0 PID: 10321 Comm: syz.3.1465 Not tainted syzkaller #0 [ 404.185389][T10321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.195473][T10321] Call Trace: [ 404.198775][T10321] [ 404.201728][T10321] dump_stack_lvl+0x18c/0x250 [ 404.206438][T10321] ? show_regs_print_info+0x20/0x20 [ 404.211667][T10321] ? load_image+0x400/0x400 [ 404.216202][T10321] ? __might_fault+0xaa/0x120 [ 404.220902][T10321] ? __lock_acquire+0x7d40/0x7d40 [ 404.225957][T10321] should_fail_ex+0x39d/0x4d0 [ 404.230676][T10321] _copy_from_user+0x2f/0xe0 [ 404.235293][T10321] sock_do_ioctl+0x190/0x310 [ 404.239913][T10321] ? sock_show_fdinfo+0xb0/0xb0 [ 404.244809][T10321] sock_ioctl+0x5ba/0x7e0 [ 404.249167][T10321] ? sock_poll+0x3e0/0x3e0 [ 404.253625][T10321] ? bpf_lsm_file_ioctl+0x9/0x10 [ 404.258587][T10321] ? security_file_ioctl+0x80/0xa0 [ 404.263732][T10321] ? sock_poll+0x3e0/0x3e0 [ 404.268193][T10321] __se_sys_ioctl+0xfd/0x170 [ 404.272813][T10321] do_syscall_64+0x55/0xa0 [ 404.277254][T10321] ? clear_bhb_loop+0x40/0x90 [ 404.281967][T10321] ? clear_bhb_loop+0x40/0x90 [ 404.286673][T10321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.292594][T10321] RIP: 0033:0x7f4063f9acb9 [ 404.297028][T10321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.316658][T10321] RSP: 002b:00007f4064dba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.325099][T10321] RAX: ffffffffffffffda RBX: 00007f4064216090 RCX: 00007f4063f9acb9 [ 404.333095][T10321] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000008 [ 404.341084][T10321] RBP: 00007f4064dba090 R08: 0000000000000000 R09: 0000000000000000 [ 404.349078][T10321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.357071][T10321] R13: 00007f4064216128 R14: 00007f4064216090 R15: 00007fff584af148 [ 404.365084][T10321] [ 406.491381][T10313] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1464'. [ 407.261757][T10348] netlink: 'syz.1.1472': attribute type 3 has an invalid length. [ 407.289007][T10348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1472'. [ 407.509987][ T6222] bond0: (slave wlan1): Releasing backup interface [ 407.518536][ T6222] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode [ 407.548020][T10349] netlink: 'syz.3.1469': attribute type 21 has an invalid length. [ 408.053479][ T6222] hsr_slave_0: left promiscuous mode [ 408.061495][ T6222] hsr_slave_1: left promiscuous mode [ 408.069082][ T6222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.077045][ T6222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.104076][ T6222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.117675][ T6222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.137812][ T6222] bridge0: port 3(team0) entered disabled state [ 408.225620][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.307360][ T6222] veth1_macvtap: left promiscuous mode [ 408.313759][ T6222] veth0_macvtap: left promiscuous mode [ 408.322406][ T6222] veth1_vlan: left promiscuous mode [ 409.624283][ T6222] team_slave_1 (unregistering): left promiscuous mode [ 409.637600][ T6222] team_slave_1 (unregistering): left allmulticast mode [ 409.648804][ T6222] team0 (unregistering): Port device team_slave_1 removed [ 409.695782][ T6222] C (unregistering): left promiscuous mode [ 409.701830][ T6222] C (unregistering): left allmulticast mode [ 409.713852][ T6222] team0 (unregistering): Port device C removed [ 409.761429][ T6222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.770888][ T6222] bond_slave_1 (unregistering): left promiscuous mode [ 410.126815][ T6222] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 410.135953][ T6222] batadv0 (unregistering): left promiscuous mode [ 410.263182][ T6222] bond0 (unregistering): Released all slaves [ 410.491398][T10192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 410.542130][T10192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 410.601198][T10192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 410.631420][T10192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 410.666583][T10388] netlink: 'syz.0.1481': attribute type 3 has an invalid length. [ 410.691176][T10388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1481'. [ 411.096838][T10192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.204946][T10192] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.239912][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.247128][ T6208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.292442][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.300592][ T6208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.572249][T10417] netlink: 'syz.3.1484': attribute type 21 has an invalid length. [ 412.383264][T10192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.605121][T10444] netlink: 'syz.3.1491': attribute type 3 has an invalid length. [ 412.621827][T10444] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1491'. [ 414.392889][T10458] FAULT_INJECTION: forcing a failure. [ 414.392889][T10458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.410088][T10458] CPU: 0 PID: 10458 Comm: syz.3.1495 Not tainted syzkaller #0 [ 414.417613][T10458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.427714][T10458] Call Trace: [ 414.431034][T10458] [ 414.434003][T10458] dump_stack_lvl+0x18c/0x250 [ 414.438732][T10458] ? show_regs_print_info+0x20/0x20 [ 414.443972][T10458] ? load_image+0x400/0x400 [ 414.448522][T10458] ? __might_fault+0xaa/0x120 [ 414.453231][T10458] ? __lock_acquire+0x7d40/0x7d40 [ 414.458308][T10458] should_fail_ex+0x39d/0x4d0 [ 414.463040][T10458] _copy_from_user+0x2f/0xe0 [ 414.467684][T10458] __sys_bpf+0x23e/0x890 [ 414.471972][T10458] ? bpf_link_show_fdinfo+0x390/0x390 [ 414.477379][T10458] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.483573][T10458] __x64_sys_bpf+0x7c/0x90 [ 414.488028][T10458] do_syscall_64+0x55/0xa0 [ 414.492486][T10458] ? clear_bhb_loop+0x40/0x90 [ 414.497193][T10458] ? clear_bhb_loop+0x40/0x90 [ 414.501945][T10458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.507887][T10458] RIP: 0033:0x7f4063f9acb9 [ 414.512351][T10458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.531996][T10458] RSP: 002b:00007f4064ddb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 414.540453][T10458] RAX: ffffffffffffffda RBX: 00007f4064215fa0 RCX: 00007f4063f9acb9 [ 414.548549][T10458] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 414.556571][T10458] RBP: 00007f4064ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 414.564566][T10458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.572577][T10458] R13: 00007f4064216038 R14: 00007f4064215fa0 R15: 00007fff584af148 [ 414.580601][T10458] [ 415.376459][T10192] veth0_vlan: entered promiscuous mode [ 415.462114][T10192] veth1_vlan: entered promiscuous mode [ 415.552612][T10192] veth0_macvtap: entered promiscuous mode [ 415.587137][T10192] veth1_macvtap: entered promiscuous mode [ 415.662558][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.683546][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.707127][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.746602][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.793893][T10475] netlink: 'syz.3.1500': attribute type 3 has an invalid length. [ 415.815971][T10475] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1500'. [ 415.859346][T10192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.967300][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.985187][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.004446][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.030464][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.065928][T10192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.097727][T10192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.133882][T10192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.166200][T10473] netlink: 'syz.1.1499': attribute type 21 has an invalid length. [ 416.229415][T10192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.274104][T10192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.307588][T10192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.332579][T10192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.548461][ T6216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.594596][ T6216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.712519][ T6216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.729176][ T6216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.422946][T10508] syzkaller0: entered promiscuous mode [ 417.437823][T10508] syzkaller0: entered allmulticast mode [ 419.947880][T10544] netlink: 'syz.2.1510': attribute type 3 has an invalid length. [ 419.973543][T10544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1510'. [ 420.244328][T10554] netlink: 'syz.3.1514': attribute type 3 has an invalid length. [ 420.263647][T10554] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1514'. [ 420.544296][T10560] netlink: 'syz.2.1515': attribute type 21 has an invalid length. [ 420.818495][T10565] syzkaller0: entered promiscuous mode [ 420.829165][T10565] syzkaller0: entered allmulticast mode [ 423.046038][T10571] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1520'. [ 423.182092][T10585] netlink: 'syz.1.1523': attribute type 3 has an invalid length. [ 423.190272][T10585] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1523'. [ 425.512727][T10606] netlink: 'syz.3.1530': attribute type 21 has an invalid length. [ 425.830582][T10611] syzkaller0: entered promiscuous mode [ 425.857700][T10611] syzkaller0: entered allmulticast mode [ 425.886862][T10622] netlink: 'syz.1.1535': attribute type 3 has an invalid length. [ 425.895673][T10622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1535'. [ 425.910347][T10621] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1536'. [ 427.158867][T10636] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1541'. [ 428.307574][T10641] netlink: 'syz.3.1542': attribute type 21 has an invalid length. [ 428.877306][T10659] netlink: 'syz.3.1548': attribute type 3 has an invalid length. [ 428.892254][T10659] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1548'. [ 429.213276][T10662] netlink: 'syz.3.1549': attribute type 2 has an invalid length. [ 429.222837][T10662] netlink: 'syz.3.1549': attribute type 1 has an invalid length. [ 429.231229][T10662] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1549'. [ 429.250540][T10664] netlink: 'syz.3.1549': attribute type 2 has an invalid length. [ 429.258831][T10664] netlink: 'syz.3.1549': attribute type 1 has an invalid length. [ 429.266775][T10664] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1549'. [ 431.715931][T10675] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1554'. [ 431.960241][T10673] syzkaller0: entered promiscuous mode [ 431.966170][T10673] syzkaller0: entered allmulticast mode [ 432.102284][T10686] netlink: 'syz.2.1558': attribute type 3 has an invalid length. [ 432.114570][T10686] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1558'. [ 432.153255][T10678] netlink: 'syz.0.1555': attribute type 21 has an invalid length. [ 432.405418][T10690] FAULT_INJECTION: forcing a failure. [ 432.405418][T10690] name failslab, interval 1, probability 0, space 0, times 0 [ 432.423737][T10690] CPU: 0 PID: 10690 Comm: syz.2.1559 Not tainted syzkaller #0 [ 432.431376][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.441489][T10690] Call Trace: [ 432.444822][T10690] [ 432.447799][T10690] dump_stack_lvl+0x18c/0x250 [ 432.452548][T10690] ? show_regs_print_info+0x20/0x20 [ 432.457799][T10690] ? load_image+0x400/0x400 [ 432.462358][T10690] ? __might_sleep+0xe0/0xe0 [ 432.467002][T10690] ? __lock_acquire+0x7d40/0x7d40 [ 432.472075][T10690] should_fail_ex+0x39d/0x4d0 [ 432.476812][T10690] should_failslab+0x9/0x20 [ 432.481363][T10690] slab_pre_alloc_hook+0x59/0x310 [ 432.486444][T10690] ? page_pool_create+0x71/0x5c0 [ 432.491435][T10690] __kmem_cache_alloc_node+0x53/0x250 [ 432.496900][T10690] ? page_pool_create+0x71/0x5c0 [ 432.501896][T10690] kmalloc_node_trace+0x26/0xe0 [ 432.506809][T10690] page_pool_create+0x71/0x5c0 [ 432.511647][T10690] bpf_test_run_xdp_live+0x203/0x1b20 [ 432.517126][T10690] ? 0xffffffffa0004740 [ 432.521333][T10690] ? 0xffffffffa0004740 [ 432.525543][T10690] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 432.531505][T10690] ? 0xffffffffa0004740 [ 432.535707][T10690] ? xdp_convert_md_to_buff+0x330/0x330 [ 432.541344][T10690] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 432.547653][T10690] ? _copy_from_user+0xa5/0xe0 [ 432.552467][T10690] ? bpf_test_init+0x119/0x140 [ 432.557269][T10690] ? xdp_convert_md_to_buff+0x5b/0x330 [ 432.562764][T10690] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 432.568185][T10690] ? dev_put+0x80/0x80 [ 432.572306][T10690] ? dev_put+0x80/0x80 [ 432.576404][T10690] bpf_prog_test_run+0x321/0x390 [ 432.581380][T10690] __sys_bpf+0x49d/0x890 [ 432.585657][T10690] ? bpf_link_show_fdinfo+0x390/0x390 [ 432.591077][T10690] ? lock_chain_count+0x20/0x20 [ 432.595974][T10690] __x64_sys_bpf+0x7c/0x90 [ 432.600465][T10690] do_syscall_64+0x55/0xa0 [ 432.604910][T10690] ? clear_bhb_loop+0x40/0x90 [ 432.609638][T10690] ? clear_bhb_loop+0x40/0x90 [ 432.614350][T10690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.620279][T10690] RIP: 0033:0x7f844539acb9 [ 432.624732][T10690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.644366][T10690] RSP: 002b:00007f84461e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 432.652814][T10690] RAX: ffffffffffffffda RBX: 00007f8445615fa0 RCX: 00007f844539acb9 [ 432.660816][T10690] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 432.668815][T10690] RBP: 00007f84461e5090 R08: 0000000000000000 R09: 0000000000000000 [ 432.676808][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.684812][T10690] R13: 00007f8445616038 R14: 00007f8445615fa0 R15: 00007ffcd8b66bf8 [ 432.692830][T10690] [ 434.836109][T10698] netlink: 'syz.0.1562': attribute type 2 has an invalid length. [ 434.844203][T10698] netlink: 'syz.0.1562': attribute type 8 has an invalid length. [ 434.852067][T10698] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1562'. [ 435.209141][T10713] netlink: 'syz.3.1568': attribute type 3 has an invalid length. [ 435.217320][T10713] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1568'. [ 435.375025][T10718] netlink: 'syz.2.1570': attribute type 10 has an invalid length. [ 435.430893][T10718] team0: Device hsr_slave_0 failed to register rx_handler [ 435.465914][T10719] netlink: 'syz.2.1570': attribute type 10 has an invalid length. [ 435.485569][T10719] team0: Device hsr_slave_0 failed to register rx_handler [ 437.995613][T10725] netlink: 'syz.0.1571': attribute type 21 has an invalid length. [ 438.078832][T10732] syzkaller0: entered promiscuous mode [ 438.084606][T10732] syzkaller0: entered allmulticast mode [ 438.399756][T10755] netlink: 'syz.3.1579': attribute type 9 has an invalid length. [ 438.411119][T10755] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1579'. [ 438.441726][T10757] netlink: 'syz.1.1580': attribute type 3 has an invalid length. [ 438.452249][T10757] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1580'. [ 440.277564][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.284140][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.522969][T10765] IPv6: NLM_F_CREATE should be specified when creating new route [ 440.534302][T10765] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1582'. [ 440.549285][T10767] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.1582'. [ 441.539237][T10794] netlink: 'syz.0.1589': attribute type 3 has an invalid length. [ 441.561337][T10794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1589'. [ 441.594373][T10780] netlink: 'syz.1.1585': attribute type 21 has an invalid length. [ 441.962681][T10801] syzkaller0: entered promiscuous mode [ 441.969062][T10801] syzkaller0: entered allmulticast mode [ 442.014042][T10805] netlink: 'syz.0.1594': attribute type 1 has an invalid length. [ 442.035939][T10805] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1594'. [ 442.064604][T10805] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1594'. [ 444.455443][T10835] netlink: 'syz.0.1603': attribute type 3 has an invalid length. [ 444.477241][T10835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1603'. [ 445.277126][T10836] netlink: 'syz.3.1602': attribute type 21 has an invalid length. [ 447.554923][T10853] syzkaller0: entered promiscuous mode [ 447.560617][T10853] syzkaller0: entered allmulticast mode [ 447.810083][T10867] FAULT_INJECTION: forcing a failure. [ 447.810083][T10867] name failslab, interval 1, probability 0, space 0, times 0 [ 447.822802][T10867] CPU: 0 PID: 10867 Comm: syz.1.1612 Not tainted syzkaller #0 [ 447.830319][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.840427][T10867] Call Trace: [ 447.843746][T10867] [ 447.846713][T10867] dump_stack_lvl+0x18c/0x250 [ 447.851438][T10867] ? show_regs_print_info+0x20/0x20 [ 447.856693][T10867] ? load_image+0x400/0x400 [ 447.861267][T10867] ? __kmem_cache_alloc_node+0x13a/0x250 [ 447.866988][T10867] ? netdev_core_pick_tx+0x340/0x340 [ 447.872340][T10867] should_fail_ex+0x39d/0x4d0 [ 447.877083][T10867] should_failslab+0x9/0x20 [ 447.881644][T10867] slab_pre_alloc_hook+0x59/0x310 [ 447.886809][T10867] kmem_cache_alloc+0x5a/0x2d0 [ 447.891644][T10867] ? skb_clone+0x1eb/0x370 [ 447.896115][T10867] skb_clone+0x1eb/0x370 [ 447.900441][T10867] bpf_clone_redirect+0xad/0x3d0 [ 447.905450][T10867] bpf_prog_c08ef512837047f4+0x61/0x66 [ 447.910958][T10867] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 447.916989][T10867] ? lock_chain_count+0x20/0x20 [ 447.921891][T10867] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 447.927921][T10867] ? lockdep_softirqs_on+0x580/0x580 [ 447.933265][T10867] ? lock_chain_count+0x20/0x20 [ 447.938161][T10867] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 447.944474][T10867] ? __local_bh_disable_ip+0x108/0x1a0 [ 447.949992][T10867] ? __cant_sleep+0x220/0x220 [ 447.954720][T10867] ? __local_bh_enable_ip+0x13a/0x1c0 [ 447.960139][T10867] ? _local_bh_enable+0xa0/0xa0 [ 447.965041][T10867] ? bpf_test_timer_continue+0x135/0x380 [ 447.968210][T10869] netlink: 'syz.2.1613': attribute type 3 has an invalid length. [ 447.970703][T10867] ? bpf_test_run+0x174/0x870 [ 447.983191][T10867] bpf_test_run+0x2df/0x870 [ 447.987756][T10867] ? bpf_test_run+0x174/0x870 [ 447.990059][T10869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1613'. [ 447.992474][T10867] ? convert___skb_to_skb+0x590/0x590 [ 448.006952][T10867] ? eth_get_headlen+0x210/0x210 [ 448.011954][T10867] ? slab_build_skb+0x25f/0x3f0 [ 448.016857][T10867] ? convert___skb_to_skb+0x3d/0x590 [ 448.022203][T10867] bpf_prog_test_run_skb+0xad2/0x12b0 [ 448.027637][T10867] ? cpu_online+0x60/0x60 [ 448.032001][T10867] bpf_prog_test_run+0x321/0x390 [ 448.036979][T10867] __sys_bpf+0x49d/0x890 [ 448.041252][T10867] ? bpf_link_show_fdinfo+0x390/0x390 [ 448.046664][T10867] ? lock_chain_count+0x20/0x20 [ 448.051552][T10867] __x64_sys_bpf+0x7c/0x90 [ 448.055995][T10867] do_syscall_64+0x55/0xa0 [ 448.060432][T10867] ? clear_bhb_loop+0x40/0x90 [ 448.065177][T10867] ? clear_bhb_loop+0x40/0x90 [ 448.069883][T10867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.075809][T10867] RIP: 0033:0x7f4bc379acb9 [ 448.080257][T10867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.099899][T10867] RSP: 002b:00007f4bc460e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 448.108352][T10867] RAX: ffffffffffffffda RBX: 00007f4bc3a15fa0 RCX: 00007f4bc379acb9 [ 448.116698][T10867] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 448.124690][T10867] RBP: 00007f4bc460e090 R08: 0000000000000000 R09: 0000000000000000 [ 448.132694][T10867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.140755][T10867] R13: 00007f4bc3a16038 R14: 00007f4bc3a15fa0 R15: 00007ffe4a462ab8 [ 448.148767][T10867] [ 448.493367][T10875] FAULT_INJECTION: forcing a failure. [ 448.493367][T10875] name failslab, interval 1, probability 0, space 0, times 0 [ 448.512183][T10875] CPU: 0 PID: 10875 Comm: syz.2.1615 Not tainted syzkaller #0 [ 448.519725][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 448.529839][T10875] Call Trace: [ 448.533166][T10875] [ 448.536141][T10875] dump_stack_lvl+0x18c/0x250 [ 448.540865][T10875] ? show_regs_print_info+0x20/0x20 [ 448.546124][T10875] ? load_image+0x400/0x400 [ 448.550709][T10875] ? __lock_acquire+0x7d40/0x7d40 [ 448.555791][T10875] ? mark_lock+0x94/0x320 [ 448.560175][T10875] should_fail_ex+0x39d/0x4d0 [ 448.564906][T10875] should_failslab+0x9/0x20 [ 448.569473][T10875] slab_pre_alloc_hook+0x59/0x310 [ 448.574591][T10875] ? ip6_setup_cork+0x1d6/0xfe0 [ 448.579505][T10875] __kmem_cache_alloc_node+0x53/0x250 [ 448.584950][T10875] ? ip6_setup_cork+0x1d6/0xfe0 [ 448.589914][T10875] kmalloc_trace+0x2a/0xe0 [ 448.594388][T10875] ip6_setup_cork+0x1d6/0xfe0 [ 448.599135][T10875] ip6_append_data+0x220/0x350 [ 448.603976][T10875] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 448.608880][T10875] l2tp_ip6_sendmsg+0x1237/0x1690 [ 448.613972][T10875] ? irqentry_enter+0x37/0x50 [ 448.618715][T10875] ? l2tp_ip6_destroy_sock+0x60/0x60 [ 448.624064][T10875] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 448.630109][T10875] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 448.636358][T10875] ? inet_sendmsg+0x17c/0x2f0 [ 448.641082][T10875] ? inet_sendmsg+0x7c/0x2f0 [ 448.645730][T10875] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 448.651070][T10875] ? security_socket_sendmsg+0x80/0xa0 [ 448.656570][T10875] ? inet_send_prepare+0x260/0x260 [ 448.661735][T10875] ____sys_sendmsg+0x5ba/0x960 [ 448.666546][T10875] ? __lock_acquire+0x7d40/0x7d40 [ 448.671624][T10875] ? __sys_sendmsg_sock+0x30/0x30 [ 448.676687][T10875] ? __import_iovec+0x3fa/0x850 [ 448.681598][T10875] ? import_iovec+0x73/0xa0 [ 448.686156][T10875] ___sys_sendmsg+0x2a6/0x360 [ 448.690888][T10875] ? __sys_sendmsg+0x2a0/0x2a0 [ 448.695727][T10875] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 448.702050][T10875] __se_sys_sendmsg+0x1c2/0x2b0 [ 448.706960][T10875] ? __x64_sys_sendmsg+0x80/0x80 [ 448.711951][T10875] ? lockdep_hardirqs_on+0x98/0x150 [ 448.717628][T10875] do_syscall_64+0x55/0xa0 [ 448.722085][T10875] ? clear_bhb_loop+0x40/0x90 [ 448.726829][T10875] ? clear_bhb_loop+0x40/0x90 [ 448.731551][T10875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.737489][T10875] RIP: 0033:0x7f844539acb9 [ 448.741945][T10875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.761669][T10875] RSP: 002b:00007f84461e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.770158][T10875] RAX: ffffffffffffffda RBX: 00007f8445615fa0 RCX: 00007f844539acb9 [ 448.778182][T10875] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000007 [ 448.786200][T10875] RBP: 00007f84461e5090 R08: 0000000000000000 R09: 0000000000000000 [ 448.794218][T10875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.802236][T10875] R13: 00007f8445616038 R14: 00007f8445615fa0 R15: 00007ffcd8b66bf8 [ 448.810273][T10875] [ 449.055158][T10881] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1616'. [ 449.066252][T10881] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 450.600254][T10873] netlink: 'syz.1.1614': attribute type 21 has an invalid length. [ 450.610742][T10886] netlink: 'syz.2.1617': attribute type 15 has an invalid length. [ 450.629207][T10886] netlink: 'syz.2.1617': attribute type 7 has an invalid length. [ 450.637167][T10886] FAULT_INJECTION: forcing a failure. [ 450.637167][T10886] name failslab, interval 1, probability 0, space 0, times 0 [ 450.651395][T10886] CPU: 0 PID: 10886 Comm: syz.2.1617 Not tainted syzkaller #0 [ 450.658905][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 450.668988][T10886] Call Trace: [ 450.672293][T10886] [ 450.675248][T10886] dump_stack_lvl+0x18c/0x250 [ 450.679971][T10886] ? show_regs_print_info+0x20/0x20 [ 450.685215][T10886] ? load_image+0x400/0x400 [ 450.689762][T10886] ? verify_lock_unused+0x140/0x140 [ 450.694997][T10886] should_fail_ex+0x39d/0x4d0 [ 450.699707][T10886] should_failslab+0x9/0x20 [ 450.704244][T10886] slab_pre_alloc_hook+0x59/0x310 [ 450.709394][T10886] kmem_cache_alloc+0x5a/0x2d0 [ 450.714190][T10886] ? skb_clone+0x1eb/0x370 [ 450.718634][T10886] skb_clone+0x1eb/0x370 [ 450.722903][T10886] __netlink_deliver_tap+0x41c/0x830 [ 450.728231][T10886] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.733456][T10886] netlink_deliver_tap+0x19c/0x1b0 [ 450.738605][T10886] netlink_sendskb+0x68/0x130 [ 450.743316][T10886] netlink_ack+0xce1/0x1180 [ 450.747842][T10886] ? __dev_queue_xmit+0x26b/0x36b0 [ 450.752997][T10886] ? netlink_dump+0xe50/0xe50 [ 450.757706][T10886] ? perf_trace_lock+0xfc/0x3b0 [ 450.762598][T10886] netlink_rcv_skb+0x2c5/0x4d0 [ 450.767383][T10886] ? rtnetlink_bind+0x80/0x80 [ 450.772085][T10886] ? netlink_ack+0x1180/0x1180 [ 450.776893][T10886] ? __lock_acquire+0x7d40/0x7d40 [ 450.781949][T10886] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.787186][T10886] netlink_unicast+0x751/0x8d0 [ 450.791987][T10886] netlink_sendmsg+0x8d0/0xbf0 [ 450.796778][T10886] ? netlink_getsockopt+0x590/0x590 [ 450.802009][T10886] ? aa_sock_msg_perm+0x94/0x150 [ 450.806973][T10886] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 450.812276][T10886] ? security_socket_sendmsg+0x80/0xa0 [ 450.817765][T10886] ? netlink_getsockopt+0x590/0x590 [ 450.822983][T10886] ____sys_sendmsg+0x5ba/0x960 [ 450.827794][T10886] ? __asan_memset+0x22/0x40 [ 450.832419][T10886] ? __sys_sendmsg_sock+0x30/0x30 [ 450.837473][T10886] ? __import_iovec+0x5f2/0x850 [ 450.842374][T10886] ? import_iovec+0x73/0xa0 [ 450.846903][T10886] ___sys_sendmsg+0x2a6/0x360 [ 450.851646][T10886] ? __sys_sendmsg+0x2a0/0x2a0 [ 450.856448][T10886] ? __lock_acquire+0x7d40/0x7d40 [ 450.861524][T10886] __se_sys_sendmsg+0x1c2/0x2b0 [ 450.866399][T10886] ? __x64_sys_sendmsg+0x80/0x80 [ 450.871385][T10886] ? lockdep_hardirqs_on+0x98/0x150 [ 450.876613][T10886] do_syscall_64+0x55/0xa0 [ 450.881054][T10886] ? clear_bhb_loop+0x40/0x90 [ 450.885755][T10886] ? clear_bhb_loop+0x40/0x90 [ 450.890466][T10886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.896393][T10886] RIP: 0033:0x7f844539acb9 [ 450.900857][T10886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.920508][T10886] RSP: 002b:00007f84461e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.928945][T10886] RAX: ffffffffffffffda RBX: 00007f8445615fa0 RCX: 00007f844539acb9 [ 450.936966][T10886] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 450.944956][T10886] RBP: 00007f84461e5090 R08: 0000000000000000 R09: 0000000000000000 [ 450.952960][T10886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.960963][T10886] R13: 00007f8445616038 R14: 00007f8445615fa0 R15: 00007ffcd8b66bf8 [ 450.969055][T10886] [ 451.452108][T10901] netlink: 'syz.1.1623': attribute type 3 has an invalid length. [ 451.491472][T10901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1623'. [ 452.595146][T10903] sit0: entered allmulticast mode [ 452.778979][T10910] syzkaller0: entered promiscuous mode [ 452.784662][T10910] syzkaller0: entered allmulticast mode [ 452.892510][T10918] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1629'. [ 452.910925][T10918] openvswitch: netlink: Message has 20476 unknown bytes. [ 454.985739][T10922] netlink: 'syz.1.1628': attribute type 21 has an invalid length. [ 455.170852][T10927] netlink: 'syz.3.1635': attribute type 2 has an invalid length. [ 455.215372][T10927] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1635'. [ 455.316172][T10939] netlink: 'syz.0.1636': attribute type 3 has an invalid length. [ 455.330366][T10939] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1636'. [ 455.735922][T10942] netlink: 'syz.1.1637': attribute type 21 has an invalid length. [ 455.871305][T10948] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1639'. [ 455.917670][T10948] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1639'. [ 455.927356][T10948] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1639'. [ 456.088372][T10948] netlink: 'syz.2.1639': attribute type 10 has an invalid length. [ 456.195307][T10948] team0: Device veth1_macvtap failed to register rx_handler [ 456.692406][T10959] syzkaller0: entered promiscuous mode [ 456.716829][T10959] syzkaller0: entered allmulticast mode [ 456.751417][T10968] netlink: 'syz.3.1643': attribute type 21 has an invalid length. [ 458.319101][T10979] netlink: 'syz.3.1648': attribute type 3 has an invalid length. [ 458.327004][T10979] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1648'. [ 459.021656][T10984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.029464][T10984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.101681][T10984] žÿ: (slave batadv0): Releasing backup interface [ 459.678458][T11007] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1656'. [ 459.816572][T11012] netlink: 'syz.2.1658': attribute type 3 has an invalid length. [ 459.825791][T11012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1658'. [ 459.866937][T11013] netlink: 'syz.0.1655': attribute type 21 has an invalid length. [ 460.220751][T11021] syzkaller0: entered promiscuous mode [ 460.227205][T11021] syzkaller0: entered allmulticast mode [ 462.735536][T11049] netlink: 'syz.0.1668': attribute type 3 has an invalid length. [ 462.746145][T11049] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1668'. [ 463.239452][T11061] netlink: 'syz.0.1672': attribute type 21 has an invalid length. [ 463.260846][T11066] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 463.272429][T11066] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1674'. [ 463.281913][T11066] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 463.289914][T11067] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 463.299041][T11067] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1674'. [ 463.312282][T11067] netlink: 'syz.2.1674': attribute type 1 has an invalid length. [ 463.440714][T11069] syzkaller0: entered promiscuous mode [ 463.446276][T11069] syzkaller0: entered allmulticast mode [ 463.995975][T11079] netlink: 'syz.1.1680': attribute type 3 has an invalid length. [ 464.004143][T11079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1680'. [ 464.206951][T11083] netlink: 'syz.0.1679': attribute type 33 has an invalid length. [ 464.225153][T11083] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1679'. [ 466.674725][T11115] netlink: 'syz.0.1689': attribute type 3 has an invalid length. [ 466.684020][T11115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1689'. [ 466.799652][T11117] netlink: 'syz.2.1687': attribute type 21 has an invalid length. [ 466.984348][T11123] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1690'. [ 467.125742][T11125] syzkaller0: entered promiscuous mode [ 467.135635][T11125] syzkaller0: entered allmulticast mode [ 470.343741][T11151] netlink: 'syz.0.1700': attribute type 3 has an invalid length. [ 470.356884][T11151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1700'. [ 470.826792][T11168] netlink: 'syz.1.1703': attribute type 21 has an invalid length. [ 471.063512][T11171] syzkaller0: entered promiscuous mode [ 471.072408][T11171] syzkaller0: entered allmulticast mode [ 473.286659][T11187] netlink: 'syz.0.1712': attribute type 3 has an invalid length. [ 473.318038][T11187] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1712'. [ 474.040686][T11207] syzkaller0: entered promiscuous mode [ 474.046540][T11207] syzkaller0: entered allmulticast mode [ 474.206947][T11212] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.1721'. [ 474.216851][T11212] openvswitch: netlink: IP tunnel dst address not specified [ 474.263060][T11208] netlink: 'syz.0.1718': attribute type 21 has an invalid length. [ 474.974673][T11229] netlink: 'syz.0.1727': attribute type 3 has an invalid length. [ 474.987910][T11229] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1727'. [ 477.526897][T11255] netlink: 'syz.0.1737': attribute type 3 has an invalid length. [ 477.535401][T11255] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1737'. [ 477.720392][T11258] netlink: 'syz.3.1736': attribute type 21 has an invalid length. [ 477.932973][T11260] netlink: 'syz.0.1738': attribute type 10 has an invalid length. [ 478.412080][T11260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.475541][T11260] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 478.503544][T11265] bond0: entered promiscuous mode [ 478.522101][T11265] bond_slave_0: entered promiscuous mode [ 478.533044][T11265] bond_slave_1: entered promiscuous mode [ 478.546661][T11265] batadv0: entered promiscuous mode [ 478.772302][T11271] syzkaller0: entered promiscuous mode [ 478.780479][T11271] syzkaller0: entered allmulticast mode [ 478.882786][T11286] netlink: 'syz.0.1746': attribute type 3 has an invalid length. [ 478.919271][T11286] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1746'. [ 481.700095][T11310] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1754'. [ 482.173124][T11309] netlink: 'syz.2.1752': attribute type 21 has an invalid length. [ 482.474561][T11316] netlink: 'syz.1.1756': attribute type 3 has an invalid length. [ 482.482658][T11316] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1756'. [ 483.817180][T11332] netlink: 'syz.0.1761': attribute type 21 has an invalid length. [ 483.828896][T11332] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1761'. [ 483.891555][T11338] team0: Port device team_slave_0 removed [ 483.911005][T11338] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 484.018217][T11344] team_slave_0: left promiscuous mode [ 484.039023][T11344] team_slave_0: left allmulticast mode [ 484.108977][T11344] team0: Port device team_slave_0 removed [ 484.115472][T11344] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 484.368532][T11359] netlink: 'syz.3.1771': attribute type 3 has an invalid length. [ 484.376361][T11359] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1771'. [ 484.451136][T11355] netlink: 'syz.0.1767': attribute type 21 has an invalid length. [ 485.193740][T11374] FAULT_INJECTION: forcing a failure. [ 485.193740][T11374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.214475][T11374] CPU: 0 PID: 11374 Comm: syz.2.1777 Not tainted syzkaller #0 [ 485.222027][T11374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 485.232143][T11374] Call Trace: [ 485.235473][T11374] [ 485.238440][T11374] dump_stack_lvl+0x18c/0x250 [ 485.243163][T11374] ? show_regs_print_info+0x20/0x20 [ 485.248413][T11374] ? load_image+0x400/0x400 [ 485.252969][T11374] ? __might_fault+0xaa/0x120 [ 485.257689][T11374] ? __lock_acquire+0x7d40/0x7d40 [ 485.262780][T11374] should_fail_ex+0x39d/0x4d0 [ 485.267522][T11374] _copy_from_user+0x2f/0xe0 [ 485.272164][T11374] ___sys_sendmsg+0x1c7/0x360 [ 485.276900][T11374] ? __sys_sendmsg+0x2a0/0x2a0 [ 485.281733][T11374] ? trace_call_bpf+0xc3/0x6c0 [ 485.286632][T11374] __se_sys_sendmsg+0x1c2/0x2b0 [ 485.291531][T11374] ? __x64_sys_sendmsg+0x80/0x80 [ 485.296535][T11374] ? lockdep_hardirqs_on+0x98/0x150 [ 485.301785][T11374] do_syscall_64+0x55/0xa0 [ 485.306237][T11374] ? clear_bhb_loop+0x40/0x90 [ 485.310960][T11374] ? clear_bhb_loop+0x40/0x90 [ 485.315692][T11374] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.321727][T11374] RIP: 0033:0x7f844539acb9 [ 485.326199][T11374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.345852][T11374] RSP: 002b:00007f84461e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.354315][T11374] RAX: ffffffffffffffda RBX: 00007f8445615fa0 RCX: 00007f844539acb9 [ 485.362324][T11374] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 485.370337][T11374] RBP: 00007f84461e5090 R08: 0000000000000000 R09: 0000000000000000 [ 485.378351][T11374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.386365][T11374] R13: 00007f8445616038 R14: 00007f8445615fa0 R15: 00007ffcd8b66bf8 [ 485.394401][T11374] [ 485.794636][T11382] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1780'. [ 485.845508][T11387] netlink: 'syz.3.1782': attribute type 3 has an invalid length. [ 485.897671][T11387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1782'. [ 486.043513][T11391] FAULT_INJECTION: forcing a failure. [ 486.043513][T11391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.091614][T11391] CPU: 0 PID: 11391 Comm: syz.2.1783 Not tainted syzkaller #0 [ 486.099183][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.109317][T11391] Call Trace: [ 486.112648][T11391] [ 486.115630][T11391] dump_stack_lvl+0x18c/0x250 [ 486.120377][T11391] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.126597][T11391] ? show_regs_print_info+0x20/0x20 [ 486.131852][T11391] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.138077][T11391] ? dump_stack+0x9/0x20 [ 486.142378][T11391] should_fail_ex+0x39d/0x4d0 [ 486.147114][T11391] _copy_from_user+0x2f/0xe0 [ 486.151759][T11391] __sys_bpf+0x23e/0x890 [ 486.156058][T11391] ? bpf_link_show_fdinfo+0x390/0x390 [ 486.161500][T11391] ? lock_chain_count+0x20/0x20 [ 486.166396][T11391] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 486.172438][T11391] __x64_sys_bpf+0x7c/0x90 [ 486.176902][T11391] do_syscall_64+0x55/0xa0 [ 486.181428][T11391] ? clear_bhb_loop+0x40/0x90 [ 486.186165][T11391] ? clear_bhb_loop+0x40/0x90 [ 486.190898][T11391] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.196844][T11391] RIP: 0033:0x7f844539acb9 [ 486.201305][T11391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.221149][T11391] RSP: 002b:00007f84461e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 486.229623][T11391] RAX: ffffffffffffffda RBX: 00007f8445615fa0 RCX: 00007f844539acb9 [ 486.237647][T11391] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 486.245667][T11391] RBP: 00007f84461e5090 R08: 0000000000000000 R09: 0000000000000000 [ 486.253691][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.261703][T11391] R13: 00007f8445616038 R14: 00007f8445615fa0 R15: 00007ffcd8b66bf8 [ 486.269748][T11391] [ 486.952132][T11408] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1788'. [ 487.006847][T11408] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 487.022721][T11402] netlink: 'syz.0.1785': attribute type 21 has an invalid length. [ 487.047595][T11407] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1788'. [ 487.068377][T11407] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 487.079926][T11407] CPU: 0 PID: 11407 Comm: syz.2.1788 Not tainted syzkaller #0 [ 487.087591][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.097703][T11407] Call Trace: [ 487.101034][T11407] [ 487.104031][T11407] dump_stack_lvl+0x18c/0x250 [ 487.108780][T11407] ? show_regs_print_info+0x20/0x20 [ 487.114036][T11407] ? load_image+0x400/0x400 [ 487.118640][T11407] sysfs_warn_dup+0x8e/0xa0 [ 487.123230][T11407] sysfs_do_create_link_sd+0xc0/0x110 [ 487.128678][T11407] device_add_class_symlinks+0x1cf/0x240 [ 487.134389][T11407] device_add+0x507/0xc20 [ 487.138805][T11407] wiphy_register+0x1dad/0x2ae0 [ 487.143767][T11407] ? cfg80211_event_work+0x40/0x40 [ 487.148939][T11407] ? minstrel_ht_alloc+0x88a/0x990 [ 487.154146][T11407] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 487.160298][T11407] ieee80211_register_hw+0x3464/0x4250 [ 487.165885][T11407] ? ieee80211_tasklet_handler+0x20/0x20 [ 487.171580][T11407] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 487.177551][T11407] ? __debug_object_init+0xec/0x450 [ 487.182802][T11407] ? __asan_memset+0x22/0x40 [ 487.187508][T11407] ? __hrtimer_init+0x186/0x270 [ 487.192410][T11407] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 487.198204][T11407] ? mac80211_hwsim_free+0x220/0x220 [ 487.203523][T11407] ? rcu_is_watching+0x15/0xb0 [ 487.208328][T11407] ? kstrndup+0xbd/0x140 [ 487.212630][T11407] hwsim_new_radio_nl+0xdc9/0x1a90 [ 487.217802][T11407] ? __nla_validate+0x50/0x50 [ 487.222562][T11407] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 487.228951][T11407] ? __nla_parse+0x40/0x50 [ 487.233417][T11407] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 487.239800][T11407] genl_family_rcv_msg_doit+0x211/0x310 [ 487.245389][T11407] ? end_current_label_crit_section+0x170/0x170 [ 487.251671][T11407] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 487.257644][T11407] ? bpf_lsm_capable+0x9/0x10 [ 487.262358][T11407] ? security_capable+0x89/0xb0 [ 487.267256][T11407] genl_rcv_msg+0x619/0x7a0 [ 487.271833][T11407] ? genl_bind+0x360/0x360 [ 487.276283][T11407] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 487.282652][T11407] ? perf_trace_lock+0x304/0x3b0 [ 487.287689][T11407] netlink_rcv_skb+0x241/0x4d0 [ 487.292538][T11407] ? genl_bind+0x360/0x360 [ 487.297001][T11407] ? netlink_ack+0x1180/0x1180 [ 487.301819][T11407] ? __lock_acquire+0x7d40/0x7d40 [ 487.306895][T11407] ? down_read+0x1ac/0x2e0 [ 487.311349][T11407] genl_rcv+0x28/0x40 [ 487.315359][T11407] netlink_unicast+0x751/0x8d0 [ 487.320187][T11407] netlink_sendmsg+0x8d0/0xbf0 [ 487.325003][T11407] ? perf_trace_lock+0x304/0x3b0 [ 487.330001][T11407] ? netlink_getsockopt+0x590/0x590 [ 487.335245][T11407] ? aa_sock_msg_perm+0x94/0x150 [ 487.340227][T11407] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 487.345547][T11407] ? security_socket_sendmsg+0x80/0xa0 [ 487.351056][T11407] ? netlink_getsockopt+0x590/0x590 [ 487.356298][T11407] ____sys_sendmsg+0x5ba/0x960 [ 487.361116][T11407] ? __asan_memset+0x22/0x40 [ 487.365750][T11407] ? __sys_sendmsg_sock+0x30/0x30 [ 487.370810][T11407] ? __import_iovec+0x5f2/0x850 [ 487.375727][T11407] ? import_iovec+0x73/0xa0 [ 487.380288][T11407] ___sys_sendmsg+0x2a6/0x360 [ 487.385011][T11407] ? __sys_sendmsg+0x2a0/0x2a0 [ 487.389900][T11407] __se_sys_sendmsg+0x1c2/0x2b0 [ 487.394796][T11407] ? __x64_sys_sendmsg+0x80/0x80 [ 487.399798][T11407] ? lockdep_hardirqs_on+0x98/0x150 [ 487.405046][T11407] do_syscall_64+0x55/0xa0 [ 487.409504][T11407] ? clear_bhb_loop+0x40/0x90 [ 487.414265][T11407] ? clear_bhb_loop+0x40/0x90 [ 487.418987][T11407] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.424917][T11407] RIP: 0033:0x7f844539acb9 [ 487.429369][T11407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.449014][T11407] RSP: 002b:00007f84461e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.457473][T11407] RAX: ffffffffffffffda RBX: 00007f8445615fa0 RCX: 00007f844539acb9 [ 487.465491][T11407] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 487.473496][T11407] RBP: 00007f8445408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 487.481499][T11407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.489509][T11407] R13: 00007f8445616038 R14: 00007f8445615fa0 R15: 00007ffcd8b66bf8 [ 487.497562][T11407] [ 487.728540][T11416] FAULT_INJECTION: forcing a failure. [ 487.728540][T11416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.807734][T11416] CPU: 0 PID: 11416 Comm: syz.2.1790 Not tainted syzkaller #0 [ 487.815295][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.825398][T11416] Call Trace: [ 487.828723][T11416] [ 487.831708][T11416] dump_stack_lvl+0x18c/0x250 [ 487.836466][T11416] ? show_regs_print_info+0x20/0x20 [ 487.841787][T11416] ? load_image+0x400/0x400 [ 487.846373][T11416] ? __might_fault+0xaa/0x120 [ 487.851098][T11416] ? __lock_acquire+0x7d40/0x7d40 [ 487.856182][T11416] should_fail_ex+0x39d/0x4d0 [ 487.860924][T11416] _copy_from_user+0x2f/0xe0 [ 487.865568][T11416] __sys_bpf+0x23e/0x890 [ 487.869866][T11416] ? bpf_link_show_fdinfo+0x390/0x390 [ 487.875302][T11416] ? lock_chain_count+0x20/0x20 [ 487.880211][T11416] __x64_sys_bpf+0x7c/0x90 [ 487.884667][T11416] do_syscall_64+0x55/0xa0 [ 487.889125][T11416] ? clear_bhb_loop+0x40/0x90 [ 487.893912][T11416] ? clear_bhb_loop+0x40/0x90 [ 487.898648][T11416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.904598][T11416] RIP: 0033:0x7f844539acb9 [ 487.909055][T11416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.928690][T11416] RSP: 002b:00007f84461e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.937130][T11416] RAX: ffffffffffffffda RBX: 00007f8445615fa0 RCX: 00007f844539acb9 [ 487.945124][T11416] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 487.953118][T11416] RBP: 00007f84461e5090 R08: 0000000000000000 R09: 0000000000000000 [ 487.961111][T11416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.969098][T11416] R13: 00007f8445616038 R14: 00007f8445615fa0 R15: 00007ffcd8b66bf8 [ 487.977116][T11416] [ 488.192971][T11421] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1793'. [ 488.300880][T11428] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1794'. [ 488.407062][T11430] netlink: 'syz.0.1795': attribute type 3 has an invalid length. [ 488.425917][T11430] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1795'. [ 488.799347][T11438] mac80211_hwsim hwsim29 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 489.143967][T11452] FAULT_INJECTION: forcing a failure. [ 489.143967][T11452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.162557][T11452] CPU: 1 PID: 11452 Comm: syz.0.1803 Not tainted syzkaller #0 [ 489.170104][T11452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.180214][T11452] Call Trace: [ 489.183537][T11452] [ 489.186506][T11452] dump_stack_lvl+0x18c/0x250 [ 489.191234][T11452] ? show_regs_print_info+0x20/0x20 [ 489.196480][T11452] ? load_image+0x400/0x400 [ 489.201031][T11452] ? __might_fault+0xaa/0x120 [ 489.205752][T11452] ? __lock_acquire+0x7d40/0x7d40 [ 489.210843][T11452] should_fail_ex+0x39d/0x4d0 [ 489.215582][T11452] _copy_from_user+0x2f/0xe0 [ 489.220309][T11452] __sys_bpf+0x23e/0x890 [ 489.224623][T11452] ? bpf_link_show_fdinfo+0x390/0x390 [ 489.230071][T11452] ? lock_chain_count+0x20/0x20 [ 489.234982][T11452] __x64_sys_bpf+0x7c/0x90 [ 489.239453][T11452] do_syscall_64+0x55/0xa0 [ 489.243926][T11452] ? clear_bhb_loop+0x40/0x90 [ 489.248685][T11452] ? clear_bhb_loop+0x40/0x90 [ 489.253414][T11452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 489.259357][T11452] RIP: 0033:0x7f0a5079acb9 [ 489.263816][T11452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.283468][T11452] RSP: 002b:00007f0a5161e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 489.291935][T11452] RAX: ffffffffffffffda RBX: 00007f0a50a15fa0 RCX: 00007f0a5079acb9 [ 489.299990][T11452] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 489.307986][T11452] RBP: 00007f0a5161e090 R08: 0000000000000000 R09: 0000000000000000 [ 489.315980][T11452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.323976][T11452] R13: 00007f0a50a16038 R14: 00007f0a50a15fa0 R15: 00007ffd3c8fc668 [ 489.331986][T11452] [ 489.467896][T11458] netlink: 'syz.2.1805': attribute type 3 has an invalid length. [ 489.480631][T11458] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1805'. [ 489.504319][T11456] netlink: 'syz.3.1802': attribute type 21 has an invalid length. [ 490.240362][T11473] FAULT_INJECTION: forcing a failure. [ 490.240362][T11473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.273031][T11473] CPU: 1 PID: 11473 Comm: syz.3.1811 Not tainted syzkaller #0 [ 490.280596][T11473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 490.290719][T11473] Call Trace: [ 490.294037][T11473] [ 490.297005][T11473] dump_stack_lvl+0x18c/0x250 [ 490.301739][T11473] ? show_regs_print_info+0x20/0x20 [ 490.306989][T11473] ? load_image+0x400/0x400 [ 490.311554][T11473] ? __might_fault+0xaa/0x120 [ 490.316285][T11473] ? __lock_acquire+0x7d40/0x7d40 [ 490.321388][T11473] should_fail_ex+0x39d/0x4d0 [ 490.326130][T11473] _copy_from_user+0x2f/0xe0 [ 490.330769][T11473] ___sys_sendmsg+0x1c7/0x360 [ 490.335483][T11473] ? __sys_sendmsg+0x2a0/0x2a0 [ 490.340314][T11473] __se_sys_sendmsg+0x1c2/0x2b0 [ 490.345206][T11473] ? __x64_sys_sendmsg+0x80/0x80 [ 490.350188][T11473] ? syscall_enter_from_user_mode+0x2e/0x80 [ 490.356119][T11473] do_syscall_64+0x55/0xa0 [ 490.360562][T11473] ? clear_bhb_loop+0x40/0x90 [ 490.365273][T11473] ? clear_bhb_loop+0x40/0x90 [ 490.369982][T11473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.375909][T11473] RIP: 0033:0x7f4063f9acb9 [ 490.380354][T11473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.399995][T11473] RSP: 002b:00007f4064ddb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.408442][T11473] RAX: ffffffffffffffda RBX: 00007f4064215fa0 RCX: 00007f4063f9acb9 [ 490.416438][T11473] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000008 [ 490.424431][T11473] RBP: 00007f4064ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 490.432434][T11473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.440428][T11473] R13: 00007f4064216038 R14: 00007f4064215fa0 R15: 00007fff584af148 [ 490.448443][T11473] [ 490.736469][T11483] netlink: 'syz.3.1815': attribute type 3 has an invalid length. [ 490.757789][T11483] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1815'. [ 491.133481][T11500] FAULT_INJECTION: forcing a failure. [ 491.133481][T11500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.153755][T11500] CPU: 0 PID: 11500 Comm: syz.2.1821 Not tainted syzkaller #0 [ 491.159403][ T2948] wlan1: Trigger new scan to find an IBSS to join [ 491.161307][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.161329][T11500] Call Trace: [ 491.181250][T11500] [ 491.184253][T11500] dump_stack_lvl+0x18c/0x250 [ 491.189007][T11500] ? show_regs_print_info+0x20/0x20 [ 491.194259][T11500] ? load_image+0x400/0x400 [ 491.198833][T11500] ? __might_fault+0xaa/0x120 [ 491.203570][T11500] ? __lock_acquire+0x7d40/0x7d40 [ 491.208664][T11500] should_fail_ex+0x39d/0x4d0 [ 491.213413][T11500] _copy_from_user+0x2f/0xe0 [ 491.218064][T11500] __sys_bpf+0x23e/0x890 [ 491.222361][T11500] ? bpf_link_show_fdinfo+0x390/0x390 [ 491.227835][T11500] ? lock_chain_count+0x20/0x20 [ 491.232763][T11500] __x64_sys_bpf+0x7c/0x90 [ 491.237233][T11500] do_syscall_64+0x55/0xa0 [ 491.241692][T11500] ? clear_bhb_loop+0x40/0x90 [ 491.246417][T11500] ? clear_bhb_loop+0x40/0x90 [ 491.251184][T11500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 491.257125][T11500] RIP: 0033:0x7f844539acb9 [ 491.261591][T11500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.281242][T11500] RSP: 002b:00007f84461e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.289717][T11500] RAX: ffffffffffffffda RBX: 00007f8445615fa0 RCX: 00007f844539acb9 [ 491.297745][T11500] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 491.305769][T11500] RBP: 00007f84461e5090 R08: 0000000000000000 R09: 0000000000000000 [ 491.313798][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.321817][T11500] R13: 00007f8445616038 R14: 00007f8445615fa0 R15: 00007ffcd8b66bf8 [ 491.329886][T11500] [ 491.508608][T11501] netlink: 'syz.0.1819': attribute type 21 has an invalid length. [ 492.173607][T11518] sit0: entered promiscuous mode [ 492.331487][T11527] netlink: 'syz.3.1830': attribute type 3 has an invalid length. [ 492.343061][T11527] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1830'. [ 493.384501][T11540] netlink: 'syz.3.1834': attribute type 21 has an invalid length. [ 494.170349][T11563] netlink: 'syz.0.1842': attribute type 3 has an invalid length. [ 494.185319][T11563] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1842'. [ 494.238862][T11561] netlink: 'syz.2.1841': attribute type 21 has an invalid length. [ 494.879075][T11584] netlink: 'syz.0.1846': attribute type 21 has an invalid length. [ 495.208630][ T6208] wlan1: Trigger new scan to find an IBSS to join [ 495.364960][T11587] FAULT_INJECTION: forcing a failure. [ 495.364960][T11587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.401786][T11587] CPU: 1 PID: 11587 Comm: syz.3.1850 Not tainted syzkaller #0 [ 495.409346][T11587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.419549][T11587] Call Trace: [ 495.422880][T11587] [ 495.425855][T11587] dump_stack_lvl+0x18c/0x250 [ 495.430598][T11587] ? show_regs_print_info+0x20/0x20 [ 495.435855][T11587] ? load_image+0x400/0x400 [ 495.440439][T11587] ? __might_fault+0xaa/0x120 [ 495.445175][T11587] ? __lock_acquire+0x7d40/0x7d40 [ 495.450267][T11587] should_fail_ex+0x39d/0x4d0 [ 495.455004][T11587] _copy_from_user+0x2f/0xe0 [ 495.459629][T11587] __sys_bpf+0x23e/0x890 [ 495.463900][T11587] ? bpf_link_show_fdinfo+0x390/0x390 [ 495.469315][T11587] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 495.475525][T11587] __x64_sys_bpf+0x7c/0x90 [ 495.479970][T11587] do_syscall_64+0x55/0xa0 [ 495.484763][T11587] ? clear_bhb_loop+0x40/0x90 [ 495.489481][T11587] ? clear_bhb_loop+0x40/0x90 [ 495.494197][T11587] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 495.500120][T11587] RIP: 0033:0x7f4063f9acb9 [ 495.504562][T11587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.524203][T11587] RSP: 002b:00007f4064ddb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.532653][T11587] RAX: ffffffffffffffda RBX: 00007f4064215fa0 RCX: 00007f4063f9acb9 [ 495.540659][T11587] RDX: 000000000000000c RSI: 00002000000001c0 RDI: 0000000000000023 [ 495.548662][T11587] RBP: 00007f4064ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 495.556657][T11587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.564659][T11587] R13: 00007f4064216038 R14: 00007f4064215fa0 R15: 00007fff584af148 [ 495.572701][T11587] [ 496.017761][T11597] netlink: 'syz.3.1854': attribute type 3 has an invalid length. [ 496.025584][T11597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1854'. [ 496.170494][T11601] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1856'. [ 496.400522][ T2948] wlan1: Creating new IBSS network, BSSID 96:f7:a3:80:eb:91 [ 496.722086][T11624] FAULT_INJECTION: forcing a failure. [ 496.722086][T11624] name failslab, interval 1, probability 0, space 0, times 0 [ 496.735488][T11624] CPU: 0 PID: 11624 Comm: syz.1.1863 Not tainted syzkaller #0 [ 496.743026][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.753124][T11624] Call Trace: [ 496.756523][T11624] [ 496.759481][T11624] dump_stack_lvl+0x18c/0x250 [ 496.764193][T11624] ? show_regs_print_info+0x20/0x20 [ 496.769421][T11624] ? load_image+0x400/0x400 [ 496.774007][T11624] ? __might_sleep+0xe0/0xe0 [ 496.778627][T11624] ? __lock_acquire+0x7d40/0x7d40 [ 496.783682][T11624] should_fail_ex+0x39d/0x4d0 [ 496.788397][T11624] should_failslab+0x9/0x20 [ 496.792934][T11624] slab_pre_alloc_hook+0x59/0x310 [ 496.798001][T11624] kmem_cache_alloc+0x5a/0x2d0 [ 496.802794][T11624] ? __pmd_alloc+0x111/0x8b0 [ 496.807417][T11624] __pmd_alloc+0x111/0x8b0 [ 496.811892][T11624] ? __rwlock_init+0x150/0x150 [ 496.816721][T11624] ? __pud_alloc+0x1f0/0x1f0 [ 496.821356][T11624] ? hugepage_vma_check+0x488/0x5a0 [ 496.826593][T11624] handle_mm_fault+0xb5d/0x4c00 [ 496.831486][T11624] ? handle_mm_fault+0xe7/0x4c00 [ 496.836492][T11624] ? numa_migrate_prep+0x350/0x350 [ 496.841647][T11624] ? lock_chain_count+0x20/0x20 [ 496.846529][T11624] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 496.851853][T11624] do_user_addr_fault+0x730/0x12c0 [ 496.857011][T11624] exc_page_fault+0x64/0x100 [ 496.861636][T11624] asm_exc_page_fault+0x26/0x30 [ 496.866519][T11624] RIP: 0010:__put_user_4+0x11/0x20 [ 496.871660][T11624] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 496.891295][T11624] RSP: 0018:ffffc9000bb2fe80 EFLAGS: 00050206 [ 496.897394][T11624] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000000 [ 496.905410][T11624] RDX: 0000000000000000 RSI: ffffffff8acace80 RDI: ffffffff8b1c74a0 [ 496.913409][T11624] RBP: 0000000000000004 R08: ffffffff8e8a5f2f R09: 1ffffffff1d14be5 [ 496.921403][T11624] R10: dffffc0000000000 R11: fffffbfff1d14be6 R12: 0000000000000000 [ 496.929405][T11624] R13: 0000200000000000 R14: 0000000000000010 R15: 0000000000000002 [ 496.937419][T11624] __sys_socketpair+0xb8/0x550 [ 496.942227][T11624] __x64_sys_socketpair+0x9b/0xb0 [ 496.947280][T11624] do_syscall_64+0x55/0xa0 [ 496.951725][T11624] ? clear_bhb_loop+0x40/0x90 [ 496.956439][T11624] ? clear_bhb_loop+0x40/0x90 [ 496.961147][T11624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.967069][T11624] RIP: 0033:0x7f4bc379acb9 [ 496.971517][T11624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.991151][T11624] RSP: 002b:00007f4bc460e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 496.999594][T11624] RAX: ffffffffffffffda RBX: 00007f4bc3a15fa0 RCX: 00007f4bc379acb9 [ 497.007613][T11624] RDX: 0000000000000007 RSI: 0000000000000002 RDI: 0000000000000010 [ 497.015628][T11624] RBP: 00007f4bc460e090 R08: 0000000000000000 R09: 0000000000000000 [ 497.023623][T11624] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.031623][T11624] R13: 00007f4bc3a16038 R14: 00007f4bc3a15fa0 R15: 00007ffe4a462ab8 [ 497.039635][T11624] [ 497.271849][T11629] netlink: 'syz.2.1862': attribute type 21 has an invalid length. [ 497.438711][T11633] netlink: 'syz.3.1866': attribute type 3 has an invalid length. [ 497.446621][T11633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1866'. [ 498.534698][T11666] netlink: 'syz.2.1879': attribute type 3 has an invalid length. [ 498.543037][T11666] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1879'. [ 498.809334][T11667] netlink: 'syz.1.1878': attribute type 21 has an invalid length. [ 498.818684][T11672] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1880'. [ 498.856533][T11672] netlink: 'syz.0.1880': attribute type 21 has an invalid length. [ 498.872174][T11672] netlink: 'syz.0.1880': attribute type 22 has an invalid length. [ 499.043010][T11677] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1881'. [ 499.671405][T11684] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1883'. [ 500.868004][T11698] netlink: 'syz.3.1889': attribute type 3 has an invalid length. [ 500.887505][T11698] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1889'. [ 501.352919][T11708] netlink: 'syz.1.1893': attribute type 10 has an invalid length. [ 501.698794][T11708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.717691][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.724142][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.735419][T11708] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 501.977225][T11704] bond0: entered promiscuous mode [ 501.982528][T11704] bond_slave_0: entered promiscuous mode [ 501.989773][T11704] bond_slave_1: entered promiscuous mode [ 501.995845][T11704] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 502.005249][T11704] batadv0: entered promiscuous mode [ 502.044913][T11716] netlink: 'syz.3.1894': attribute type 21 has an invalid length. [ 502.570605][T11732] netlink: 'syz.1.1900': attribute type 3 has an invalid length. [ 502.629632][T11732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1900'. [ 502.727793][T11734] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1901'. [ 503.070406][T11736] netlink: 'syz.3.1902': attribute type 3 has an invalid length. [ 503.124875][T11736] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1902'. [ 504.020573][T11747] netlink: 'syz.1.1903': attribute type 21 has an invalid length. [ 504.772556][T11767] netlink: 'syz.2.1909': attribute type 10 has an invalid length. [ 505.206186][T11767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.294730][T11776] netlink: 'syz.3.1911': attribute type 3 has an invalid length. [ 505.297356][T11767] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 505.323854][T11776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1911'. [ 505.335836][T11769] bond0: entered promiscuous mode [ 505.349710][T11769] bond_slave_0: entered promiscuous mode [ 505.391391][T11769] bond_slave_1: entered promiscuous mode [ 505.420564][T11769] batadv0: entered promiscuous mode [ 505.437352][T11773] netlink: 'syz.1.1910': attribute type 21 has an invalid length. [ 505.812443][T11788] netlink: 'syz.2.1914': attribute type 3 has an invalid length. [ 505.824826][T11788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1914'. [ 506.055259][T11790] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1913'. [ 506.911174][T11797] netlink: 'syz.0.1916': attribute type 3 has an invalid length. [ 506.927637][T11797] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1916'. [ 507.731516][T11809] syzkaller0: entered promiscuous mode [ 507.744715][T11809] syzkaller0: entered allmulticast mode [ 507.905906][T11818] netlink: 'syz.0.1922': attribute type 21 has an invalid length. [ 512.043789][T11826] netlink: 'syz.3.1925': attribute type 21 has an invalid length. [ 512.226819][T11835] netlink: 'syz.2.1930': attribute type 3 has an invalid length. [ 512.267094][T11835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1930'. [ 512.354253][T11840] netlink: 'syz.1.1931': attribute type 33 has an invalid length. [ 512.385947][T11840] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1931'. [ 513.746349][T11854] netlink: 'syz.0.1934': attribute type 21 has an invalid length. [ 514.013884][T11873] netlink: 'syz.1.1941': attribute type 3 has an invalid length. [ 514.041266][T11873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1941'. [ 517.316954][T11895] netlink: 'syz.0.1948': attribute type 21 has an invalid length. [ 517.476132][T11905] netlink: 'syz.0.1951': attribute type 3 has an invalid length. [ 517.484239][T11905] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1951'. [ 518.057210][T11913] netlink: 'syz.2.1954': attribute type 33 has an invalid length. [ 518.066782][T11913] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1954'. [ 518.375169][T11924] netlink: 'syz.2.1957': attribute type 3 has an invalid length. [ 518.396984][T11924] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1957'. [ 519.148051][ T5770] Bluetooth: hci1: command 0x0406 tx timeout [ 519.248558][T11944] netlink: 'syz.0.1963': attribute type 3 has an invalid length. [ 519.278079][T11944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1963'. [ 521.292480][T11941] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1960'. [ 521.772948][T11954] netlink: 'syz.3.1966': attribute type 33 has an invalid length. [ 521.790536][T11954] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1966'. [ 521.931238][T11964] netlink: 'syz.1.1970': attribute type 3 has an invalid length. [ 521.961368][T11964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1970'. [ 522.054698][T11968] netlink: 'syz.2.1972': attribute type 3 has an invalid length. [ 522.094598][T11968] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1972'. [ 524.782053][T11977] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1975'. [ 525.267654][T11997] netlink: 'syz.1.1981': attribute type 33 has an invalid length. [ 525.283277][T11997] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1981'. [ 525.389289][T12006] netlink: 'syz.0.1985': attribute type 3 has an invalid length. [ 525.397113][T12006] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1985'. [ 525.944293][T12015] netlink: 'syz.0.1987': attribute type 21 has an invalid length. [ 526.449226][ T2948] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 527.021518][T12030] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1990'. [ 529.319049][T12042] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1998'. [ 529.341420][T12042] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1998'. [ 529.355390][T12042] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1998'. [ 529.380577][T12048] netlink: 'syz.0.1998': attribute type 10 has an invalid length. [ 529.476627][T12048] team0: Device veth1_macvtap failed to register rx_handler [ 529.514683][T12047] netlink: 'syz.1.1996': attribute type 21 has an invalid length. [ 530.263544][T12059] netlink: 'syz.2.2001': attribute type 33 has an invalid length. [ 530.283308][T12059] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2001'. [ 530.434983][T12065] netlink: 'syz.1.2003': attribute type 3 has an invalid length. [ 530.449229][T12065] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2003'. [ 530.598806][T12067] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2002'. [ 534.974040][T12102] netlink: 'syz.3.2015': attribute type 33 has an invalid length. [ 534.987272][T12102] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2015'. [ 535.339866][T12112] netlink: 'syz.1.2019': attribute type 3 has an invalid length. [ 535.365017][T12112] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2019'. [ 535.840930][T12115] netlink: 'syz.1.2029': attribute type 3 has an invalid length. [ 535.897647][T12115] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2029'. [ 536.360810][T12127] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2022'. [ 538.939891][T12123] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2021'. [ 539.464621][T12151] netlink: 'syz.0.2033': attribute type 3 has an invalid length. [ 539.484233][T12151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2033'. [ 539.613884][T12155] netlink: 'syz.2.2034': attribute type 3 has an invalid length. [ 539.623703][T12155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2034'. [ 539.695347][T12157] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2035'. [ 539.916344][T12163] netlink: 'syz.0.2045': attribute type 3 has an invalid length. [ 539.957625][T12163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2045'. [ 540.154632][T12169] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.2037'. [ 541.981361][T12192] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2046'. [ 543.752886][T12199] netlink: 'syz.2.2049': attribute type 3 has an invalid length. [ 543.767163][T12199] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2049'. [ 543.791596][T12201] netlink: 'syz.3.2048': attribute type 3 has an invalid length. [ 543.799597][T12201] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2048'. [ 544.628700][T12212] netlink: 'syz.1.2051': attribute type 3 has an invalid length. [ 544.636523][T12212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2051'. [ 544.982559][T12225] netlink: 'syz.2.2066': attribute type 3 has an invalid length. [ 544.996092][T12225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2066'. [ 545.306716][T12234] netlink: 'syz.1.2060': attribute type 3 has an invalid length. [ 545.327734][T12234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2060'. [ 545.451656][T12236] FAULT_INJECTION: forcing a failure. [ 545.451656][T12236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.465465][T12236] CPU: 0 PID: 12236 Comm: syz.2.2062 Not tainted syzkaller #0 [ 545.472989][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 545.483083][T12236] Call Trace: [ 545.486389][T12236] [ 545.489353][T12236] dump_stack_lvl+0x18c/0x250 [ 545.494075][T12236] ? show_regs_print_info+0x20/0x20 [ 545.499317][T12236] ? load_image+0x400/0x400 [ 545.503869][T12236] ? __might_fault+0xaa/0x120 [ 545.508573][T12236] ? __lock_acquire+0x7d40/0x7d40 [ 545.513630][T12236] should_fail_ex+0x39d/0x4d0 [ 545.518347][T12236] _copy_from_user+0x2f/0xe0 [ 545.522965][T12236] sock_do_ioctl+0x190/0x310 [ 545.527591][T12236] ? sock_show_fdinfo+0xb0/0xb0 [ 545.532483][T12236] sock_ioctl+0x5ba/0x7e0 [ 545.536842][T12236] ? sock_poll+0x3e0/0x3e0 [ 545.541304][T12236] ? bpf_lsm_file_ioctl+0x9/0x10 [ 545.546265][T12236] ? security_file_ioctl+0x80/0xa0 [ 545.551406][T12236] ? sock_poll+0x3e0/0x3e0 [ 545.555852][T12236] __se_sys_ioctl+0xfd/0x170 [ 545.560475][T12236] do_syscall_64+0x55/0xa0 [ 545.564930][T12236] ? clear_bhb_loop+0x40/0x90 [ 545.569636][T12236] ? clear_bhb_loop+0x40/0x90 [ 545.574353][T12236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.580284][T12236] RIP: 0033:0x7f844539acb9 [ 545.584731][T12236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.604364][T12236] RSP: 002b:00007f84461e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 545.612855][T12236] RAX: ffffffffffffffda RBX: 00007f8445615fa0 RCX: 00007f844539acb9 [ 545.620856][T12236] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000003 [ 545.628860][T12236] RBP: 00007f84461e5090 R08: 0000000000000000 R09: 0000000000000000 [ 545.636860][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.644862][T12236] R13: 00007f8445616038 R14: 00007f8445615fa0 R15: 00007ffcd8b66bf8 [ 545.652880][T12236] [ 546.505510][T12255] netlink: 'syz.2.2069': attribute type 10 has an invalid length. [ 546.527115][T12255] bond0: (slave bond_slave_0): Releasing backup interface [ 546.543144][T12255] bond_slave_0: left promiscuous mode [ 547.070439][ T6208] wlan1: Trigger new scan to find an IBSS to join [ 547.083291][T12252] delete_channel: no stack [ 549.924228][T12257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.112270][ T6220] wlan1: Trigger new scan to find an IBSS to join [ 551.251556][T12285] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2076'. [ 551.558535][T12294] syz.1.2079[12294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.558690][T12294] syz.1.2079[12294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.675548][T12297] FAULT_INJECTION: forcing a failure. [ 551.675548][T12297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.799896][T12297] CPU: 1 PID: 12297 Comm: syz.3.2080 Not tainted syzkaller #0 [ 551.807483][T12297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 551.817607][T12297] Call Trace: [ 551.820956][T12297] [ 551.823910][T12297] dump_stack_lvl+0x18c/0x250 [ 551.828676][T12297] ? show_regs_print_info+0x20/0x20 [ 551.833928][T12297] ? load_image+0x400/0x400 [ 551.838504][T12297] ? __lock_acquire+0x7d40/0x7d40 [ 551.843611][T12297] ? snprintf+0xe9/0x140 [ 551.847932][T12297] should_fail_ex+0x39d/0x4d0 [ 551.852700][T12297] _copy_to_user+0x2f/0xa0 [ 551.857195][T12297] simple_read_from_buffer+0xe7/0x150 [ 551.862670][T12297] proc_fail_nth_read+0x1e8/0x260 [ 551.867782][T12297] ? proc_fault_inject_write+0x360/0x360 [ 551.873501][T12297] ? fsnotify_perm+0x271/0x5e0 [ 551.878357][T12297] ? proc_fault_inject_write+0x360/0x360 [ 551.884082][T12297] vfs_read+0x28b/0x970 [ 551.888320][T12297] ? kernel_read+0x1e0/0x1e0 [ 551.892983][T12297] ? __fget_files+0x28/0x4b0 [ 551.897649][T12297] ? __fget_files+0x28/0x4b0 [ 551.902312][T12297] ? __fget_files+0x43d/0x4b0 [ 551.907086][T12297] ? __fdget_pos+0x2a3/0x330 [ 551.911830][T12297] ? ksys_read+0x75/0x260 [ 551.916241][T12297] ksys_read+0x150/0x260 [ 551.920564][T12297] ? vfs_write+0x990/0x990 [ 551.925062][T12297] ? lockdep_hardirqs_on+0x98/0x150 [ 551.930336][T12297] do_syscall_64+0x55/0xa0 [ 551.934811][T12297] ? clear_bhb_loop+0x40/0x90 [ 551.939556][T12297] ? clear_bhb_loop+0x40/0x90 [ 551.944301][T12297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.950271][T12297] RIP: 0033:0x7f4063f5b58e [ 551.954750][T12297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 551.974440][T12297] RSP: 002b:00007f4064ddafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 551.982934][T12297] RAX: ffffffffffffffda RBX: 00007f4064ddb6c0 RCX: 00007f4063f5b58e [ 551.990977][T12297] RDX: 000000000000000f RSI: 00007f4064ddb0a0 RDI: 0000000000000005 [ 551.999030][T12297] RBP: 00007f4064ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 552.007153][T12297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.015195][T12297] R13: 00007f4064216038 R14: 00007f4064215fa0 R15: 00007fff584af148 [ 552.023277][T12297] [ 552.028210][T12299] netlink: 'syz.1.2079': attribute type 21 has an invalid length. [ 552.074879][T12295] netlink: 'syz.2.2078': attribute type 21 has an invalid length. [ 552.616330][T12313] netlink: 'syz.2.2083': attribute type 3 has an invalid length. [ 552.624441][T12313] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2083'. [ 552.920099][T12316] : entered promiscuous mode [ 552.924958][T12316] : entered allmulticast mode [ 553.207536][ T6220] wlan1: Trigger new scan to find an IBSS to join [ 657.627436][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 657.634467][ C0] rcu: 1-....: (1 GPs behind) idle=de2c/1/0x4000000000000000 softirq=51210/51222 fqs=2099 [ 657.645671][ C0] rcu: hardirqs softirqs csw/system [ 657.652121][ C0] rcu: number: 7546231 0 0 [ 657.658573][ C0] rcu: cputime: 24953 0 0 ==> 52500(ms) [ 657.666431][ C0] rcu: (detected by 0, t=10505 jiffies, g=79001, q=788 ncpus=2) [ 657.674213][ C0] Sending NMI from CPU 0 to CPUs 1: [ 657.679477][ C1] NMI backtrace for cpu 1 [ 657.679488][ C1] CPU: 1 PID: 12303 Comm: syz.3.2082 Not tainted syzkaller #0 [ 657.679504][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 657.679514][ C1] RIP: 0010:asm_sysvec_irq_work+0x0/0x20 [ 657.679545][ C1] Code: 96 37 e2 ff e9 a1 03 00 00 90 f3 0f 1e fa 0f 01 ca fc 6a ff e8 a1 02 00 00 48 89 c4 48 89 e7 e8 d6 19 e2 ff e9 81 03 00 00 90 0f 1e fa 0f 01 ca fc 6a ff e8 81 02 00 00 48 89 c4 48 89 e7 e8 [ 657.679559][ C1] RSP: 0018:ffffc900044df288 EFLAGS: 00000086 [ 657.679575][ C1] RAX: 2bb43f70d2e49d00 RBX: 0000000000000000 RCX: 2bb43f70d2e49d00 [ 657.679587][ C1] RDX: dffffc0000000000 RSI: ffffffff8acabd00 RDI: ffffffff8b1c74a0 [ 657.679600][ C1] RBP: ffffc900044df310 R08: ffffffff911a4537 R09: 1ffffffff22348a6 [ 657.679612][ C1] R10: dffffc0000000000 R11: fffffbfff22348a7 R12: ffff888018f2bc00 [ 657.679625][ C1] R13: dffffc0000000000 R14: ffff888021283c00 R15: ffff8880b8f3cac8 [ 657.679638][ C1] FS: 00007f4064ddb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 657.679653][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.679664][ C1] CR2: 00007fff584aeec0 CR3: 0000000052f35000 CR4: 00000000003506e0 [ 657.679680][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 657.679689][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 657.679699][ C1] Call Trace: [ 657.679708][ C1] [ 657.679712][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 657.679731][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 60 bf 2e 09 e8 0b 21 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 657.679744][ C1] RSP: 0018:ffffc900044df2b8 EFLAGS: 00000286 [ 657.679761][ C1] ? finish_task_switch+0x265/0x8f0 [ 657.679784][ C1] __schedule+0x155b/0x45a0 [ 657.679825][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 657.679851][ C1] ? asan.module_dtor+0x20/0x20 [ 657.679875][ C1] ? mark_lock+0x94/0x320 [ 657.679896][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 657.679924][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 657.679943][ C1] preempt_schedule_irq+0xbf/0x150 [ 657.679960][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 657.679983][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 657.680008][ C1] irqentry_exit+0x67/0x70 [ 657.680029][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 657.680050][ C1] RIP: 0010:refill_obj_stock+0x3fc/0x6a0 [ 657.680069][ C1] Code: 24 80 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 25 08 f8 0f 85 ad 00 00 00 f7 c3 00 02 00 00 74 01 fb 48 8b 7c 24 20 <48> 85 ff 74 05 e8 1a 95 00 00 45 85 f6 74 4f 48 8b 7c 24 08 e8 7b [ 657.680083][ C1] RSP: 0000:ffffc900044df6a0 EFLAGS: 00000206 [ 657.680095][ C1] RAX: 2bb43f70d2e49d00 RBX: 0000000000000a02 RCX: 2bb43f70d2e49d00 [ 657.680107][ C1] RDX: dffffc0000000000 RSI: ffffffff8acabd00 RDI: 0000000000000000 [ 657.680118][ C1] RBP: ffffc900044df7a0 R08: ffffffff911a4537 R09: 1ffffffff22348a6 [ 657.680130][ C1] R10: dffffc0000000000 R11: fffffbfff22348a7 R12: dffffc0000000000 [ 657.680143][ C1] R13: 1ffff9200089bedc R14: 0000000000000000 R15: ffff8880b8f37d90 [ 657.680178][ C1] ? refill_obj_stock+0xef/0x6a0 [ 657.680196][ C1] ? obj_cgroup_charge+0x630/0x630 [ 657.680215][ C1] ? kasan_quarantine_put+0xd8/0x220 [ 657.680240][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 657.680268][ C1] memcg_slab_free_hook+0x125/0x1f0 [ 657.680290][ C1] ? exit_mmap+0x61d/0xb90 [ 657.680311][ C1] kmem_cache_free+0xe1/0x270 [ 657.680340][ C1] exit_mmap+0x61d/0xb90 [ 657.680361][ C1] ? perf_trace_preemptirq_template+0x269/0x330 [ 657.680390][ C1] ? vm_brk+0x30/0x30 [ 657.680409][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 657.680439][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 657.680467][ C1] ? uprobe_clear_state+0x278/0x290 [ 657.680491][ C1] __mmput+0x118/0x3c0 [ 657.680510][ C1] copy_process+0x2960/0x3d80 [ 657.680540][ C1] ? copy_process+0x96e/0x3d80 [ 657.680561][ C1] ? futex_wait+0x4cc/0x5e0 [ 657.680583][ C1] ? __pidfd_prepare+0x140/0x140 [ 657.680611][ C1] kernel_clone+0x24b/0x8a0 [ 657.680634][ C1] ? create_io_thread+0x190/0x190 [ 657.680661][ C1] ? do_futex+0x2ff/0x3e0 [ 657.680682][ C1] __x64_sys_clone+0x1b7/0x230 [ 657.680703][ C1] ? __ia32_sys_vfork+0x140/0x140 [ 657.680732][ C1] ? lock_chain_count+0x20/0x20 [ 657.680756][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 657.680780][ C1] do_syscall_64+0x55/0xa0 [ 657.680796][ C1] ? clear_bhb_loop+0x40/0x90 [ 657.680816][ C1] ? clear_bhb_loop+0x40/0x90 [ 657.680839][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 657.680859][ C1] RIP: 0033:0x7f4063f9acb9 [ 657.680874][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 657.680887][ C1] RSP: 002b:00007f4064ddafd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 657.680903][ C1] RAX: ffffffffffffffda RBX: 00007f4064215fa0 RCX: 00007f4063f9acb9 [ 657.680915][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004801000 [ 657.680925][ C1] RBP: 00007f4064008bf7 R08: 0000000000000000 R09: 0000000000000000 [ 657.680935][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 657.680944][ C1] R13: 00007f4064216038 R14: 00007f4064215fa0 R15: 00007fff584af148 [ 657.680969][ C1]